Rivers of Phish: Sophisticated Phishing Targets Russia's Perceived Enemies Around the Globe
Essential information
- Published
- 14/08/2024 15:04
- Modified
- 14/08/2024 15:45
- Tags
- 2024-08-14 captcha coldwastrel javascript pdf phishing
- Related entities
- 28 observables, 1 intrusion sets (apt), 12 techniques (mitre), 4 others
Description
An extensive investigation uncovered an elaborate phishing campaign conducted by a Russia-based threat actor known as COLDRIVER, attributed to Russia's Federal Security Service. The campaign employed personalized social engineering tactics to target civil society groups, NGOs, journalists, and government entities perceived as adversaries. A separate threat actor called COLDWASTREL, potentially aligned with Russian interests, was also identified employing similar techniques. The report details the intricate methods used, including impersonating known individuals, crafting credible lures, and harvesting credentials for account takeovers, underscoring the persistent threats facing civil society from state-backed cyber operations.