Google: apparent Russian hackers play copycat to commercial spyware vendors
The attack campaigns show how spyware tech companies have become more akin to nation-state threat actors.
Advertisement
Cozy Bear
CISA emergency directive tells agencies to fix credentials after Microsoft breach
CyberScoop first reported on the existence of the directive, which calls the pilfered emails “a grave and unacceptable risk to agencies."
Federal government affected by Russian breach of Microsoft
U.S. cybersecurity officials issued an emergency directive this week to address a breach by Russian operatives of Microsoft first disclosed in January.
German political party targeted by SVR-linked group in spearphishing campaign, Mandiant says
The group may have been seeking insights on shifting European sentiments on Ukraine, threat analysts suggest.
SolarWinds hackers set up phony media outlets to trick targets
New infrastructure, old tricks.
Latest Russian espionage activity is broader than SolarWinds-style hacking effort, Microsoft’s Tom Burt says
Russia's SVR intelligence agency did some "innovative, novel work" in the latest campaign, he added.
Advertisement
Russian spies compromised 14 tech providers, aiming to ‘piggyback’ on customer access, Microsoft says
Investigators say they caught the apparent intelligence-gathering operation relatively early.
SolarWinds hackers targeted Autodesk in latest confirmed fallout from cyber-espionage campaign
The company detected a compromised server that was quickly taken offline, it told the Securities and Exchange Commission.
Evidence suggests Russia’s SVR is still using ‘WellMess’ malware, despite US warnings
It's less clear what APT29 might be doing with the hacking tool, after allegedly using it last summer to try to steal COVID-19 research.
SolarWinds hackers had access to Denmark’s central bank, report says
Meanwhile, investigations into the cyber-espionage activity are ongoing.