In fresh months, US and allied authorities have unequivocally warned that pro-Russian hacktivist groups are carrying out attacks on critical infrastructure in many countries. They are exploiting poorly secured operational technology (OT) and industrial control systems (ICS), including through open and poorly protected VNC connections and HMIs.