Volexity, a cybersecurity company, highlighted UNC6293's phishing lures in December 2025, noting diplomatic themes and conference-related lures.
Discovered from: Russian Hackers Exploit Google OAuth and WhatsApp Linking in Multi-Platform Account Hijacking Campaigns