Joint Cybersecurity Advisory - AA21-116A - Russian Foreign Intelligence Service (SVR) Cyber Operations

Joint advisory from FBI, DHS, and CISA describing SVR (APT29) cyber operations: nation-state actors conducted sophisticated, stealthy intrusions—including SolarWinds supply‑chain compromises, exploitation of CVE‑2019‑19781, credential-based access (password spraying), and deployment of WELLMESS—targeting government, policy, and vaccine research networks; the advisory details observed tradecraft, infrastructure patterns, and remediation/mitigation recommendations for network defenders.