Latest cybersecurity reporting from selected sources.

The FBI claims Russian spies are targeting Signal backup keys

A new phishing campaign has been identified, delivering the Phantom information-stealing malware via an ISO attachment

A fresh wave of spear-phishing linked to the Russia-based Star Blizzard group has been detected by Sekoia

A new wave of phishing attacks exploiting Microsoft 365 OAuth tools has been observed impersonating diplomats to steal access codes

A prominent expert on Russian information operations was targeted by a sophisticated spear phishing attack likely coming from Russian hackers

A large-scale phishing campaign using DarkWatchman and Sheriff malware has been observed targeting companies in Russia and Ukraine

Russian state actor Midnight Blizzard is using fake wine tasting events as a lure to spread malware for espionage purposes, according to Check Point

Volexity highlighted how Russian nation-state actors are stealing Microsoft device authentication codes to compromise accounts

North Korean Kimsuky group has escalated their phishing campaigns, using Russian domains to steal credentials

Citizen Lab attributed the campaign to Coldriver, a notorious FSB subordinate team, and Coldwastrel, a new, Russian-aligned group

The routers were hijacked to steal credentials, proxy traffic, and host phishing pages and custom tools

The Russia-based actor exploited compromised Microsoft 365 tenants owned by small businesses

Unit 42 researchers believe a Russian threat group repurposed a legitimate flyer for a BMW car sent to embassies in Kyiv, Ukraine

Cyfirma said the motive behind the attacks may be financial in nature

Google claims state actors are using Ukraine war as a phishing lure

Armorblox warns of new campaign using Russian domain