Amazon has reported significant disruptions to cyber operations linked to Russia’s GRU, targeting organizations utilizing its cloud infrastructure since 2021. The attackers primarily focused on critical sectors, especially energy, exploiting both newly discovered and known vulnerabilities to gain unauthorized access. By 2025, their tactics evolved, with an increasing emphasis on misconfigured customer network devices rather than direct vulnerability exploitation. This development underscores the persistent threat posed by state-sponsored cyber activities, highlighting the critical need for robust cybersecurity measures in protecting vital infrastructure and safeguarding sensitive data against such sophisticated attacks.