Officials say activity of Russian IP addresses “likely indicates early stages of reconnaissance, scanning networks for use in potential future intrusions.”
WASHINGTON, D.C., USA — The FBI has warned the U.S. energy sector about “network scanning activity” stemming from multiple Russia-based IP addresses. The activity is believed to be associated with cyber actors “who previously conducted destructive cyber activity against foreign critical infrastructure.”
The FBI bulletin, issued March 18 and obtained by CBS News, was released just days before President Biden announced Monday that “evolving intelligence” suggests Russia is exploring options for potential cyberattacks targeting the U.S. homeland.
Federal law enforcement revealed that activity of Russian IP addresses “likely indicates early stages of reconnaissance, scanning networks for vulnerabilities for use in potential future intrusions.”
The FBI has identified 140 overlapping IP addresses linked to “abnormal scanning” activity of at least five U.S. energy companies, as well as at least 18 other U.S. companies spanning the defense industrial base, financial services, and information technology.
However, the focus appears to be on entities within the energy sector, according to the FBI assessment.
…
