Blizzard
-
Blog
Seashell Blizzard hacker group escalating attacks on critical infrastructure, Microsoft warns
A subgroup of the Russian state-sponsored hacking group, Seashell Blizzard, has been targeting critical infrastructure organizations and governments around the world for years, authorities have warned. The campaign, dubbed ‘BadPilot‘ by Microsoft’s Threat Intelligence Team, saw the group gain access to targets across a number of sensitive sectors, including energy, oil and gas, telecommunications, shipping, and arms manufacturing, as well…
Read More » -
Blog
HPE alerts affected staff after Midnight Blizzard breach
Hewlett Packard Enterprise (HPE) is notifying staff whose personal data was accessed by Russian state-sponsored hackers back in May 2023. According to filings with the attorney general offices in New Hampshire and Massachusetts, the company has written to at least 16 people, notifying them that their driver’s licenses, credit card numbers, and Social Security numbers may have been stolen in…
Read More » -
Blog
Star Blizzard hackers abuse WhatsApp to target high-value diplomats
Russian nation-state actor Star Blizzard has been running a new spear-phishing campaign to compromise WhatsApp accounts of targets in government, diplomacy, defense policy, international relations, and Ukraine aid organizations. According to a Microsoft Threat Intelligence report, the campaign was observed in mid-November 2024 and represents a tactical shift for Star Blizzard as a response to the recent exposure of the threat actor’s tactics,…
Read More » -
Blog
Midnight Blizzard is on the rampage again, and enterprises should be wary of its new tactics
Microsoft is warning of a Russia-linked spear phishing campaign targeting government, academia, defense and NGOs. The notorious Midnight Blizzard group – also known as APT29 and Cozy Bear – has been carrying out its campaign in dozens of countries. As with its earlier phishing campaigns, it’s been particularly active in the UK, Europe, Australia, and Japan. The campaign is still…
Read More » -
Blog
Midnight Blizzard Escalates Spear-Phishing Attacks
Microsoft Threat Intelligence has uncovered a new attack campaign by Russian threat actor Midnight Blizzard, targeting thousands of users across over 100 organizations. The attack leverages spear-phishing emails with RDP configuration files, allowing attackers to connect to and potentially compromise the targeted systems. The attack campaign targeted thousands of users in higher education, defense, non-governmental organizations, and government agencies. Dozens…
Read More »