🇱🇻 Latvia - Alleged Compromise of Latvia's State Forests Infrastructure A threat actor claims to have compromised the domain infrastructure associated with lvm.lv (Latvia's State Forests). * The actor alleges they gained control over the organization's environment and states that multiple internal systems remain unavailable. * According to the post, the compromise allegedly impacted: * Active Directory infrastructure * VMware vCenter systems * Veeam backup environments * The actor claims backup systems were deleted or rendered unavailable during the intrusion. * Several links described as backups or data repositories were referenced in the post, suggesting potential data exfiltration. * The claims have not been independently verified and may represent ongoing extortion activity. Analyst Note: Attacks targeting backup infrastructure and virtualization management platforms are a common ransomware tactic designed to hinder recovery efforts. If the claims are accurate, the alleged loss of backup and vCenter environments could significantly complicate restoration operations and prolong service disruptions. #DDW #Intelligence #DarkWeb #Latvia