US DOJ, FBI, and Microsoft Seize 107 Russian Domains Used by FSB to Spear-Phish US Officials

Oct 3, 2024, 06:42 PM

The US Department of Justice and Microsoft have seized 107 internet domains used by Russian intelligence agents and their proxies in a joint operation dubbed 'Star Blizzard.' The domains, registered via an Arizona company, were allegedly used by the Russian Federal Security Service's (FSB) Center 18 and its 'Callisto Group,' also known as 'Cold River,' to conduct spear-phishing campaigns targeting US government officials, current and former national security officials, nonprofits, and civil society organizations. The FBI participated in the operation, which involved unsealing a warrant authorizing the seizure of 41 internet domains, while Microsoft filed a lawsuit to seize an additional 66 domains. The domains were used between January 2023 and August 2024 to commit computer fraud and abuse by stealing sensitive information from US government computers and email accounts. The joint effort aims to disrupt ongoing and sophisticated cyber espionage activities by Russian state-sponsored hackers against American targets.