Russia-affiliated Secret Blizzard conducting ongoing espionage against embassies in Moscow A new Microsoft report finds that the long-running threat group has gained positions on state-aligned ISPs and Russian telecoms, while tricking foreign embassy staff to download custom malware.

Secret Blizzard’s not just spying- it's embedded. Controlling Russian telecoms and baiting embassy staff with malware? That’s espionage with home-field advantage. In Moscow, even your internet’s compromised. #CyberEspionage #microsoft #SecretBlizzard #Security cyberscoop.com/russia-secre...

Russia Uses ISPs to Spy on Diplomats, Warns Microsoft Russian intelligence since 2024 has been using their country's internet service providers to run adversary-in-the-middle attacks designed to infect diplomats inside

Russia uses domestic ISPs to spy on diplomats, warns Microsoft
www.databreachtoday.com/russia-uses-... #SecretBlizzard #Turla

Microsoft Threat Intelligence has uncovered a #CyberEspionage campaign by the #Russian state actor tracked as #SecretBlizzard that targets embassies located in Moscow using an AiTM position at the ISP level to deploy custom #ApolloShadow #malware.

🔗 www.microsoft.com/en...

Secret Blizzard Deploys Malware in ISP-Level AitM Attacks on Moscow Embassies community also keeps tabs on Secret Blizzard read more about Secret Blizzard Deploys Malware in ISP-Level AitM Attacks on Moscow Embassies

Secret Blizzard Deploys Malware in ISP-Level AitM Attacks on Moscow Embassies reconbee.com/secret-blizz...

#secretblizzard #malware #malwareattack #AitM #moscowembassy #cyberattack

Secret Blizzard compromette server e traffico per spionaggio diplomatico, usando AiTM e malware come ApolloShadow.

#AiTM #ApolloShadow #cyberespionage #evidenza #fsb #malware #SecretBlizzard #Storm0156
www.matricedigitale.it/2025/08/01/s...

ITちゃんねる ロシアのサイバースパイ集団「Secret Blizzard」が各国大使館のデバイスに中間者攻撃でマルウェアをインストールしている #SecretBlizzard #ITニュース

ロシアのサイバースパイ集団「Secret Blizzard」が各国大使館のデバイスに中間者攻撃でマルウェアをインストールしている
#SecretBlizzard #ITニュース

Russia’s cyber warfare evolved with #SecretBlizzard (APT) repurposing tools from other groups (Storm-1837 & Storm-1919) for targeted operations. The analysis details ongoing attacks on Ukraine, showcasing the group’s resource-sharing strategy and growing sophistication.

tinyurl.com/4kzn3zcv

Secret Blizzard Attack Detection: The russia-Linked APT Group Targets Ukraine via Amadey Malware to Deploy the Updated Kazuar Backdoor Version - SOC Prime Detect Secret Blizzard APT attacks targeting Ukraine via Amadey malware to deploy KazuarV2 backdoor with Sigma rules from SOC Prime Platform.

russia-backed #SecretBlizzard (aka #Turla) APT group leverages offensive tools and infrastructure of other hacking collectives to target Ukraine with KazuarV2 backdoor. Detect associated malicious activity with #Sigma rules.
socprime.com/blog/secret-...

#cybersecurity #infosec

Frequent freeloader part II: Russian actor #SecretBlizzard using tools of other groups to attack Ukraine - www.microsoft.com/en-us/securi... #APT #cyberespionage

Russian Turla hackers hit Starlink-connected devices in Ukraine Russian cyber-espionage group Turla, aka "Secret Blizzard," is utilizing other threat actors' infrastructure to target Ukrainian military devices connected via Starlink.

#Russian cyber-espionage group Turla, aka " #SecretBlizzard," is utilizing other threat actors' infrastructure to target Ukrainian military devices connected via Starlink. #CyberAttacks
#UkraineRussiaWar️️ www.bleepingcomputer.com/news/securit...

Frequent freeloader part I: Secret Blizzard compromising Storm-0156 infrastructure for espionage | Microsoft Security Blog Microsoft has observed Secret Blizzard compromising the infrastructure and backdoors of the Pakistan-based threat actor we track as Storm-0156 for espionage against the Afghanistan government and Indi...

More on the same #cybersecurity topic.

#VenomousBear #SecretBlizzard #Turla

www.microsoft.com/en-us/securi...

Russia-linked APT Secret Blizzard spotted using infrastructure of other threat actors Russia-linked APT group Secret Blizzard has used the tools and infrastructure of at least 6 other threat actors during the past 7 years.

Russia-linked APT Secret Blizzard spotted using infrastructure of other threat actors
securityaffairs.com/171699/apt/s...

#Infosec #Security #Cybersecurity #CeptBiro #RussiaLinked #APT #SecretBlizzard