Amazon identified internet domains abused by APT29

APT29 aka Midnight Blizzard recently attempted to phish thousands of people. Building on work by CERT-UA, Amazon recently identified internet domains abused by APT29, a group widely attributed to Russia’s Foreign Intelligence Service (SVR). In this instance, their targets were associated with government agencies, enterprises, and militaries, and the phishing campaign was apparently aimed at […]

#amazon #EN #2024 #APT29 #MidnightBlizzard #attribution #rdp #spear-phishing

·aws.amazon.com·Oct 31, 2024

Amazon identified internet domains abused by APT29

Midnight Blizzard conducts large-scale spear-phishing campaign using RDP files

Since October 22, 2024, Microsoft Threat Intelligence has observed Russian threat actor Midnight Blizzard sending a series of highly targeted spear-phishing emails to individuals in government, academia, defense, non-governmental organizations, and other sectors. This activity is ongoing, and Microsoft will continue to investigate and provide updates as available. Based on our investigation of previous Midnight […]

#microsoft #EN #2024 #APT29 #MidnightBlizzard #rdp #spear-phishing

·microsoft.com·Oct 31, 2024

Midnight Blizzard conducts large-scale spear-phishing campaign using RDP files