#RussianCyberespionage

Google: Russia Targeting Ukrainian Military Recruits With Android, Windows Malware

by

October 28, 2024 at 11:23AM Google has identified a Russian cyberespionage and influence operation aimed at Ukrainian military recruits, utilizing malware affecting Android and Windows devices. The findings highlight ongoing threats to Ukraine amidst the ongoing conflict. **Meeting Takeaways:** 1. **Cybersecurity Alert**: Google has identified a cyberespionage and influence campaign originating from Russia. 2. **Target … Read more

TeamViewer Hack Officially Attributed to Russian Cyberspies

by

July 1, 2024 at 05:03AM TeamViewer confirmed a hack by the APT29 Russian cyberespionage group targeting their corporate IT environment. The attackers gained access through an employee account and stole directory data and encrypted employee passwords. The company, in collaboration with Microsoft, mitigated the risk associated with the passwords. TeamViewer attributes the attack to APT29. … Read more

Microsoft confirms Russian spies stole source code, accessed internal systems

by

March 8, 2024 at 12:04PM Russian cyberspies breached Microsoft executive email accounts, stealing source code and accessing internal systems. The intrusion by Kremlin-backed “Midnight Blizzard” was initially disclosed in January, with recent evidence showing further unauthorized access. Microsoft reassures no customer systems were compromised. The ongoing investigation reports a significant, sustained threat by the attackers. … Read more

Russian Cyberspies Exploit Roundcube Flaws Against European Governments

by

February 19, 2024 at 08:03AM Recorded Future alerts about Winter Vivern, a Russian cyberespionage group, exploiting Roundcube webmail servers to target European government and military entities. The group also attacked infrastructure in Europe and Central Asia, aligned with Russian and Belarusian interests. Social engineering and XSS vulnerabilities are being used to gain access for intelligence … Read more

Russian Cyberspies Exploiting TeamCity Vulnerability at Scale: Government Agencies

by

December 14, 2023 at 06:24AM Russian cyberespionage group APT29 exploited a recent TeamCity vulnerability, impacting on-premises instances, to conduct large-scale cyberattacks since September 2023. US, UK, and Polish government agencies confirm APT29’s exploitation, linking the group to the Russian Foreign Intelligence Service. The exploitation enabled the group to access networks, deploy backdoors, and exfiltrate sensitive … Read more