A routine "I'm not a robot" check turned into a masterstroke for cyber-espionage. See how Star Blizzard's NoRobot and MaybeRobot malware transformed simple clicks into high-stakes intelligence operations.
#starblizzard
#norobot
#mayberobot
#malwaretactics
#cyberespionage
🚀 MSTIC Uncovers STAR Blizzard Spear-Phishing Campaign Targeting WhatsApp Users
Microsoft has identified STAR Blizzard, a phishing campaign targeting WhatsApp accounts through social engineering.
In mid-November 2024, Microsoft Threat Intelligence observed the Russian threat actor we track as Star Blizzard sending their typical targets spear-phishing messages, this time offering the supposed opportunity to join a WhatsApp group. This is the first time we have identified a shift in Star Blizzard’s longstanding tactics, techniques, and procedures (TTPs) to leverage a […]
Russia-linked APT Star Blizzard targets WhatsApp accounts
https://securityaffairs.com/173165/apt/russia-star-blizzard-targets-whatsapp-accounts.html
#Infosec #Security #Cybersecurity #CeptBiro #RussiaLinked #APT #StarBlizzard #WhatsAppAccounts
In mid-November 2024, Microsoft Threat Intelligence observed the Russian threat actor we track as Star Blizzard sending their typical targets spear-phishing messages, this time offering the supposed opportunity to join a WhatsApp group. This is the first time we have identified a shift in Star Blizzard’s longstanding tactics, techniques, and procedures (TTPs) to leverage a […]
Microsoft's Digital Crimes Unit (DCU) disrupts the infrastructure of Russian nation-state actor Star Blizzard, seizing 66 domains used in cyberattacks. In collaboration with the DOJ, over 100 websites have been taken down, impacting Star Blizzard's operations and enhancing cybersecurity efforts.
The Justice Department announced today the unsealing of a warrant authorizing the seizure of 41 internet domains used by Russian intelligence agents and their proxies to commit computer fraud and abuse in the United States. As an example of the Department’s commitment to public-private operational collaboration to disrupt such adversaries’ malicious cyber activities, as set
#StarBlizzard #FSB team called out by #FiveEyes govts.
The U.S. and UK, backed by Australia, Canada and New Zealand, have revealed more about an “advanced” #Russian #phishing campaign. It targets “academia, defense, governmental organizations, non-governmental organizations, think tanks and high-profile individuals.”
The UK was the first to release the accusations—because time zones, presumably. In today’s #SBBlogwatch, we unpick the latest. At @TechstrongGroup’s @SecurityBlvd: https://securityboulevard.com/2023/12/star-blizzard-russian-fsb-richixbw/?utm_source=richisoc&utm_medium=social&utm_content=richisoc&utm_campaign=richisoc
The DefendOps Diaries
Andreas Klopsch
Marcel SIneM(S)US
Rene Robichaud
The Threat Codex
Politics & Geopolitis
BGDon 🇨🇦 🇺🇸 👨💻
cje
Richi Jennings