GRU's BlueDelta Targets Key Networks in Europe with Multi-Phase Espionage Campaigns

May 30, 2024

GRU’s BlueDelta Targets Key

Networks in Europe with Multi-Phase

Espionage Campaigns

BlueDelta conducted sophisticated

credential-stealing campaigns

targeting Ukraine’s Ministry of

Defence, Ukrainian weapons import

and export companies and an

Azerbaijani think tank.

Operational infrastructure was

continuously evolved to deploy

Headlace malware through three

distinct phases, abusing legitimate

services such as GitHub, Mocky,

and InfinityFree.

Credential harvesting campaigns

targeted webmail service

users, using scripts hosted on

compromised routers to defeat

two-factor authentication and

CAPTCHA challenges.

CYBER

THREAT

ANALYSIS

RUSSIA

CYBER THREAT AN…