Suspected Russian cyber espionage groups are abusing legitimate authentication flows, including Google OAuth and WhatsApp device linking, to hijack accounts across Europe…
UNC7005, also known as Storm-2945, is a suspected Russian threat actor identified in February 2026. It targets academia, diplomatic, and nonprofit personnel…
Vidar is a commodity infostealer used by UNC7005 to siphon data from Windows hosts. It is distributed via malicious URLs and phishing…
Atomic, also known as AMOS, is a commodity infostealer targeting macOS. UNC7005 uses it to steal data from macOS hosts, often delivered…
Zscaler, a cloud security company, codified some of UNC7005's wine-related lure activity as SPIKEDWINE, noting recurring themes in Ice Relic attacks.