Pro-Russian Hackers Hit Global Critical Industries

A pro-Russian hacking group identified as SectorJ149 is targeting critical industries across South Korea, Ukraine, and other allied nations, cybersecurity researchers said. These pro-Russian hackers hit key sectors including energy, secondary battery production, and semiconductor manufacturing, raising concerns over geopolitical motives beyond financial gain.

Investigators from the NSHC ThreatRecon Team linked the group’s recent campaigns through detailed analysis of tactics, techniques, and procedures. The tools and methods used in Ukraine in October 2024 showed strong similarities with attacks on South Korean firms a month later, suggesting strategic coordination. Pro-Russian hackers hit manufacturing and infrastructure systems using custom malware sourced from dark web markets.

SectorJ149’s attack chain begins with spear phishing emails that deliver VBS malware via CAB files. The malware uses PowerShell scripts to retrieve hidden payloads from GitHub or Bitbucket, which then exploit Windows processes to maintain stealth and persistence.

Read the full report at

Pro-Russian Hackers Attacking Key Industries in Major Countries Around The World