Thecyberexpress Russian Cyber Groups Target US Engineering Firm with Advanced Attacks
Article Content
Browse articles 
A series of cyberattacks targeting a US engineering firm has been attributed to Russian cyber groups. The attackers utilized SocGholish and RomCom tools, which are commonly associated with cybercrime, to obscure their identity and intentions. This tactic indicates a strategic effort to compromise urban infrastructure systems without detection.
Ask AI about this cluster
Answers cite the sources they use
Updated 225d ago How this analysis works
More articles in this cluster (1)
Following this threat?
Track RomCom and SocGholish in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Path Traversal Vulnerability in WinRAR Exploited by RomCom Group CVE-2025-8088 is a path traversal vulnerability in WinRAR versions up to 7.12, allowing attackers to exploit alternate data streams (ADSes) in RAR files to extract malicious payloads to sensitive system locations. Exploitation began in the wild on July 18, 2025, with attackers linked to the Russia-aligned RomCom… 
Australia Faces Surge in OT/IoT Cyberattacks Amid Geopolitical Tensions A recent report by Nozomi Networks Labs indicates that Australia has become the most targeted country for IoT and OT cyberattacks, surpassing the UK and France. The report highlights persistent issues such as weak credentials and exposed industrial assets, with the energy sector being particularly vulnerable.…