Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Russian Hackers Trick Academics and Diplomats Into Giving Them Access to Email and WhatsApp
Threat Actors
Malware Families
Excerpt
Google Threat Intelligence Group (GTIG) has uncovered three suspected Russian cyber-espionage clusters targeting academics, diplomats, defense staff, government personnel, and think-tank researchers in Europe and the United States. The groups UNC6293, UNC7005, and UNC5976 abuse legitimate account-authentication features to steal access to email, Microsoft 365, Google, and WhatsApp accounts. The campaigns rely on convincing social-engineering lures rather than obvious…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(2)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| Domain | dosportal.app | High | Score 63/100 | First seen |
| Domain | foreignrelations.us | High | Score 66/100 | First seen |
IOC Relationship Graph
Building graph…