Cybersecurity incident — 2023-05-31 00:00:00
Affected organization: 22 energy companies in Denmark
Affected country: Denmark
Industry: Utilities
Event type: Exploitive
Event subtype: Exploitation of Application Server
Motive: Espionage
Actor: GRU Main Special Center for Special Technologies (Unit 74455) (SANDWORM)
Actor type: Nation-State
Actor country: Russian Federation

SektorCERT, Denmark's state-funded organization handling cyber incidents in the critical sector, reveals that 22 energy companies were breached during May 2023, exploiting the CVE-2023-28771 Zyxel vulnerability.