Same Sea, New Phish: Russian Government-Linked Social Engineering Targets App-Specific Passwords
Excerpt
Engineering Targets App-Specific Passwords - The Citizen Lab
Key Findings
Keir Giles, a prominent expert on Russian information operations, was targeted with a sophisticated and personalized novel social engineering attack.
The attacker took extensive measures to avoid raising Mr. Giles’ suspicions, and deceived him into creating and sending them App-Specific Passwords for his accounts, bypassing Multi-Factor Authentication (MFA). Google later spotted and blocked the attacker. Their Google Threat Intelligence Group (GTIG) labels the operator Russian state-backed UNC6293, which they link…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Citizen Lab on citizenlab.ca.
Mentioned in the excerpt
On the same topics
- Why Are You Texting Me? UNC3944 Leverages SMS Phishing Campaigns for SIM Swapping, Ransomware, Extortion, and NotorietyMandiant (Google) · Published 14 Sep 2023
- Star Blizzard refines phishing and malware delivery with the RedFlick techniqueMicrosoft · Published 29 Sep
- New BugSleep Backdoor Deployed in Recent MuddyWater CampaignsCheck Point · Published 15 Jul 2024
- Unmasking APT29: The Sophisticated Phishing Campaign Targeting European DiplomacyCheck Point · Published 15 Apr 2025
