Official US government announcements or credible news reports

DOJ and Microsoft Disrupt Star Blizzard and ColdRiver Russian Hacking Operations Targeting US Officials

Oct 3, 2024, 08:51 PM

The US Department of Justice (DOJ) and Microsoft have disrupted Russian hacking operations targeting US officials and civil society. The operations, attributed to the Russia-linked Star Blizzard, Callisto, and FSB-backed ColdRiver groups, involved spear-phishing efforts aimed at NATO allies, Western think tanks, journalists, and former military and intelligence officials. The hackers used seemingly legitimate email accounts to trick victims into revealing account credentials. This coordinated effort highlights the deep connections between Russian intelligence and cybercriminal groups, such as Evil Corp, which has ties to the Kremlin. The disruption was a result of simultaneous actions by the DOJ and Microsoft, with civil society playing a key role in the lawsuit. Additionally, Dutch police reported a breach by a state actor.