Russian Hackers Phish EU Officials Over Messaging Apps
Russian nation-state hackers are phishing EU officials via Signal and WhatsApp as espionage shifts from email to messaging apps.
Russian state-linked threat groups have shifted phishing operations away from email toward messaging apps such as Signal and WhatsApp, targeting EU officials. In response, EU governments are trying to move away from popular messaging platforms. The report highlights evolving social engineering tactics in nation-state espionage campaigns against government targets.
EU takes aim at Russia over 'Ghostwriter' hacking campaign against politicians, government officials
Risky Bulletin: Russia starts blocking DoH and DoT
Russian users report blocks on DoH and DoT servers, including Cloudflare 1.1.1.1 and Google 8.8.8.8, in an apparent censorship crackdown.
Russian internet users began reporting failures connecting to DNS-over-HTTPS and DNS-over-TLS servers, suggesting a government crackdown on the two privacy protocols. The blocks reportedly cover Cloudflare's 1.1.1.1 and Google's 8.8.8.8 resolvers; Roskomnadzor has not officially confirmed the action. The agency tested a similar block in March on Beeline's network and had named DoH for blocking as early as 2021. The bulletin also briefly notes state-sponsored phishing of EU officials, a DDoS against Norway's Digdir, the ReliaQuest/ShinyHunters dispute, and older ransomware and breach disclosures.