Thecyberexpress

Hacktivists Escalate Attacks on Critical Infrastructure in 2025

First seen 22 Jan 2026, 02:59 UTC • Thecyberexpress

•69% similarity •64.6

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

In 2025, hacktivists evolved their tactics, moving beyond traditional DDoS attacks and website defacements to target critical infrastructure and conduct ransomware attacks. This trend began with Z-Pentest's targeting of industrial control systems in late 2024 and has continued to escalate, according to Cyble's 2025 Threat Landscape report.

ThreatCluster AI

Attack Flow

12 entities, 13 inferred relationships (STIX 2.1).

Technique (2)

DDoS
Ransomware

Campaign (1)

Operation Eastwood

Organization (2)

Aeroflot
Education

Affected Platform (5)

BMS
HMI
Industrial Control Systems
IoT
Scada

Tool (2)

VNC
DDoSia Platform

Relationships

DDoS targets BMS
DDoS targets HMI
DDoS targets Industrial Control Systems
DDoS targets IoT
Ransomware targets BMS
Ransomware targets HMI
Ransomware targets Industrial Control Systems
Ransomware targets IoT
Operation Eastwood related to Aeroflot
Operation Eastwood related to Education
Operation Eastwood related to Scada
Operation Eastwood related to VNC
Operation Eastwood related to DDoSia Platform

Community

Browse all →

Hacktivists Escalate Attacks on Critical Infrastructure in 2025

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading