Ice Relic – CyberSecurityBoard

Attack Groups

Russian Hackers Exploit Google OAuth and WhatsApp Linking in Multi-Platform Account Hijacking Campaigns

Suspected Russian cyber espionage groups are abusing legitimate authentication flows, including Google OAuth and WhatsApp device linking, to hijack accounts across Europe…

AiTM AMOS app password phishing APT29

August 20, 2026

Attack Groups

UNC6293: Russian Sub-Cluster of Ice Relic Targeting Academia and Government

UNC6293 is a suspected Russian cyber espionage sub-cluster of Ice Relic (APT29), first detailed in June 2025. It conducts small-scale phishing campaigns…

app password APT29 Ice Relic OAuth

August 20, 2026

Attack Groups

Ice Relic (APT29/Cozy Bear/Midnight Blizzard): Russian State-Sponsored APT

Ice Relic, also known as APT29, Cozy Bear, and Midnight Blizzard, is a Russian state-sponsored threat group. Sub-clusters UNC6293 and UNC7005 are…

APT29 Cozy Bear espionage Ice Relic

August 20, 2026