APT29’s New Trick: From Spies to Sommeliers in Cyber Espionage!
APT29 is broadening its horizons, expanding its cyber espionage scope beyond government targets. Known for their crafty campaigns like a wine tasting-themed phishing attack, their latest watering hole attack showcases their evolving tactics. It’s like they’re saying, “Why limit ourselves to just government secrets when we can collect a whole buffet?”
Hot Take:
When it comes to phishing, APT29 has gone from government espionage to wine tasting and British experts. Forget James Bond; these cyber spies are using redirections, base64 encoding, and cookies to pivot their way into your data—no tuxedo required!
Key Points:
- Fake domains mimicking Cloudflare were used for phishing without compromising AWS systems.
- The cyber group APT29, aka Cozy Bear, has expanded targets beyond governments.
- APT29 is linked to Russia’s SVR and has been active since 2013.
- Recent campaigns include phishing attacks themed around wine tasting and targeting experts on Russian info ops.
- The group’s tactics show adaptability with techniques like randomized redirections and persistent cookies.
Already a member? Log in here