Microsoft Threat Intelligence has uncovered a cyberespionage campaign by the Russian state actor we track as Secret Blizzard that has been ongoing since at least 2024, targeting embassies in Moscow using an adversary-in-the-middle (AiTM) position to deploy their custom ApolloShadow malware.
Microsoft Threat Intelligence has uncovered a #CyberEspionage campaign by the #Russian state actor tracked as #SecretBlizzard that targets embassies located in Moscow using an AiTM position at the ISP level to deploy custom #ApolloShadow #malware.
The second part of the frequent freeloader blog series is out! MSTIC shares how Secret Blizzard abused tools of other threat actors to attack Ukraine.
#malware #cybersecurity #infosec #threatintelligence #microsoft #mstic #secretblizzard
Since January 2024, Microsoft has observed Secret Blizzard using the tools or infrastructure of other threat groups to attack targets in Ukraine and download its custom backdoors Tavdig and KazuarV2.
Since January 2024, Microsoft has observed Secret Blizzard using the tools or infrastructure of other threat groups to attack targets in Ukraine and download its custom backdoors Tavdig and KazuarV2.
The russian nation state actor Secret Blizzard infiltrates other threat actors to use their infrastructure and tools for their own purposes.
In part 1 of this blog series, Microsoft Threat Intelligence discusses how Secret Blizzard has used the infrastructure of the Pakistan-based threat activity cluster we call Storm-0156.
#malware #secretblizzard #infosec #cybersecurity #threatintelligence #microsoft
Microsoft has observed Secret Blizzard compromising the infrastructure and backdoors of the Pakistan-based threat actor we track as Storm-0156 for espionage against the Afghanistan government and Indian Army targets.
Russia-linked APT Secret Blizzard spotted using infrastructure of other threat actors
https://securityaffairs.com/171699/apt/secret-blizzard-using-infrastructure-of-other-threat-actors.html
#Infosec #Security #Cybersecurity #CeptBiro #RussiaLinked #APT #SecretBlizzard
Microsoft has observed Secret Blizzard compromising the infrastructure and backdoors of the Pakistan-based threat actor we track as Storm-0156 for espionage against the Afghanistan government and Indian Army targets.
Mathew J. Schwartz
The Threat Codex
অর্ঘ্য 🏏📚 💻
Ars Technica News
Andreas Klopsch
Anonymous 🐈️🐾☕🍵🏴🇵🇸 
Rene Robichaud