While stalking its target, GruesomeLarch performed credential-stuffing attacks that compromised the passwords of several accounts on a web service platform used by the organization's employees. Two-factor authentication enforced on the platform, however, prevented the attackers from compromising the accounts.

With a so-called 'Nearest Neighbor Attack,' Russian hackers compromise insecure networks within range of Wi-Fi networks at more valuable targets without ever leaving Russian soil.