Russian Snoops Add OAuth Abuse to Targeted Phishing Campaigns

How Russian Hackers Are Hijacking WhatsApp, Microsoft Accounts Using Real Login Systems: Google Warning

Google is warning that there is an emerging cyber espionage threat from suspected Russian hackers who are exploiting login and authentication software to get access to online accounts. The campaign targets individuals from sensitive sectors including government, military, defense,

Russian snoops add OAuth abuse to targeted phishing campaigns

Google is tracking three distinct suspected Russian cyber-spy groups that are targeting individuals in academia, aerospace, defense, government agencies, and think tanks across Europe and the US. The UNC (unclassified) groups, as Google calls them, have been orchestrating these highly targeted campaigns since at least last year, and they remain ongoing. Some of the phishing and OAuth-abuse operations used in the attack took place this month. Eac…

Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts

Three distinct suspected Russian cyber espionage threat clusters have been observed leveraging legitimate authentication flows to single out individuals working in academia, aerospace and defense, governments, and think tanks across Europe, as well as academia and think tanks within the U.S. These clusters include UNC6293, UNC7005, and UNC5976. "These clusters engage in persistent, adaptive