Microsoft catches Russian hackers targeting foreign embassies
Microsoft has identified Russian-state hackers targeting foreign embassies in Moscow using custom malware installed through adversary-in-the-middle attacks at the ISP level. The campaign, ongoing since last year, exploits ISPs in Russia, which are compelled to assist the Russian government. The threat group, known as Secret Blizzard, intercepts communications between embassies and their connections, redirecting them to malicious websites. This operation, named ApolloShadow, marks the first confirmation of such cyber espionage capabilities at the ISP level, making diplomatic personnel in Russia vulnerable targets.
Ars Technica•