CERT-UA warns that Russia-linked hackers are revisiting previously breached systems to prepare new attacks

CERT-UA said Russia-linked attackers are increasingly attempting to regain access to systems they previously compromised. They check whether access remains available, whether vulnerabilities have been patched and whether previously obtained credentials remain valid. CERT-UA also described a growing focus on maintaining long-term access and on trust-building social engineering against Ukrainian organizations.