One of Russia’s top cyber espionage units is using malware to target embassies and diplomatic organizations in Moscow by exploiting local internet service providers, according to Microsoft.
This marks the first confirmed case of Russia’s Federal Security Service (FSB) conducting cyber espionage at the ISP level, based on findings from Microsoft Threat Intelligence. “Microsoft is now certain that this activity is happening within Russian borders,” said Sherrod DeGrippo, Microsoft's Director of Threat Intelligence Strategy, in a statement to Reuters.
These revelations come as the United States urges Russia to agree to a ceasefire in Ukraine, and as NATO nations ramp up defense spending due to concerns over Russian aggression.
Microsoft’s analysis focuses on an FSB operation from February that targeted unnamed foreign embassies in Moscow. The campaign enabled the deployment of custom backdoors on selected systems, allowing further malware installation and data theft.
The Russian government has not responded to the claims. Moscow often denies involvement in cyber espionage efforts.
The hacking group behind the attacks, identified by Microsoft as “Secret Blizzard” and known by others as “Turla,” has been active for nearly two decades. In May 2023, the U.S. government revealed that the FBI had disrupted one of its longstanding operations.
Found this article interesting? Follow us on X(Twitter) ,Threads and FaceBook to read more exclusive content we post.
