Russia tries to disappear after attacks...
During a recent cyber exercise we uncovered some interesting activity by monitoring traffic going into several hosting partners. Initially we started seeing many TOR and VPN connections from servers so we were not sure of the content. Upon realizing that TOR was being leveraged hide traffic we decided to do what any security team worth their salt would do. We went to our own TOR exit nodes and started searching for connections. Within minutes our TOR nodes started painting a