Ongoing Cyber Attacks by Russia-Linked Groups Target International NGOs

Access Now and Citizen Lab have reported ongoing spear-phishing campaigns since early 2023 by two Russia-linked threat actors targeting entities viewed as adversaries of Russia, including international NGOs, media, Russian opposition in exile, and US and European academics.

These campaigns impersonate individuals using Proton email, aiming at those connected to Russia, Ukraine, or Belarus issues. High-profile targets like Polina Machold of Proekt Media have been singled out, possibly due to their influential networks. The significance of these attacks lies in the potential severe repercussions for the targets, including the risk of imprisonment or harm.

The extent of the phishing campaign is believed to be broader, possibly involving the US government, as indicated by previous activities of the group Coldriver and the impersonation of US officials.

Read more – Western, Russian Civil Society Targeted in Sophisticated Phishing Attacks