US, Canada, and UK government agencies are advising critical infrastructure entities on cybersecurity following pro-Russia hacktivist attacks.

The attacks have impacted water and wastewater systems, dams, energy, and food and agriculture sectors by exploiting weak cyber defenses.

Hackers have used default passwords and outdated software to manipulate equipment, causing operational disruptions and minor damages.

While most incidents have resulted in limited impact, authorities warn that the attackers have the potential to inflict physical harm.

Recent false claims of significant damage to a French dam by these hacktivists were exaggerated; the actual target was a small mill.

Some hacktivists may be linked to Sandworm (APT44), a Russian government-associated group with a history of disruptive cyber activities.

CISA and partner agencies have published a fact sheet with defensive strategies for network operators, OT manufacturers, and at-risk organizations.