Cybersecurity incident — 2020-09-24 00:00:00
Affected organization: Unnamed US federal agency
Affected country: United States of America
Industry: Public Administration
Event type: Exploitive
Event subtype: Exploitation of Application Server,Exploitation of End Hosts
Motive: Political-Espionage
Actor: GRU 85th Main Special Service Center (Unit 26165) (FANCYBEAR)
Actor type: Nation-State
Actor country: Russian Federation

Russian hackers used compromised credentials to install malware and ultimately steal files from computers at an unnamed US agency.