Is this the particular attack reported by Google last month that the NSA warning was about?
https://cloud.google.com/blog/topics/threat-intelligence/rus...
[edit: yes, it is. https://www.scribd.com/document/843124910/NSA-full]
https://cloud.google.com/blog/topics/threat-intelligence/rus...
[edit: yes, it is. https://www.scribd.com/document/843124910/NSA-full]
Also, taking into consideration something as simple as UNC5792, what if the "guest" was bridged-in? iykwim