Secret Blizzard’s Cyber Espionage Comedy: The Borrowers of the Hacker World
Secret Blizzard, a Russian cyber espionage group, has cunningly piggybacked on at least six other threat actors’ tools over the past seven years, Microsoft reveals. Known for targeting government entities worldwide, Secret Blizzard’s espionage antics have reached new heights with their extensive “borrowing” of cybercriminal infrastructure.

Hot Take:
Why bother building your own tools when you can just borrow (or steal) them from your cyber-neighbors? Secret Blizzard is the cyber equivalent of that one friend who always “forgets” their wallet at dinner. Who knew international cyber espionage had a community tool-sharing program?
Key Points:
- Secret Blizzard, linked to Russia’s FSB, has been active since at least 2004.
- The group has targeted various high-profile entities worldwide, using a mix of in-house and borrowed tools.
- Microsoft reports Secret Blizzard has used infrastructure and tools from at least six other threat actors over the past seven years.
- Their tool-sharing escapades include piggybacking on groups like Hazel Sandstorm and Storm-0156.
- The group’s tactics include watering holes, AiTM attacks, and spear-phishing campaigns.
Already a member? Log in here