WhatsApp Woes: Russian Hackers Pivot Tactics in Bold Phishing Scam
Star Blizzard, the FSB-backed phishing crew, is now targeting WhatsApp accounts with a fake group invitation. This shift from their usual tactics has them hooking victims with invalid QR codes and then luring them into scanning codes that grant full account access. It’s like a spy thriller but with more emojis.

Hot Take:
Star Blizzard is on a phishing frenzy, and they’ve decided to WhatsApp their way into your data! Who knew that creating fake WhatsApp invites could be the latest trick in the Russian cyber playbook? Move over, catfishing, there’s a new phish in town, and it’s got Kremlin backing.
Key Points:
- Star Blizzard, a phishing group linked to the Russian FSB, targets WhatsApp accounts in a new campaign.
- The group typically targets officials involved with Russian policy and aid to Ukraine.
- This campaign involved fake emails with QR codes inviting victims to join bogus WhatsApp groups.
- The QR codes trick victims into connecting their WhatsApp accounts to a linked device controlled by the hackers.
- Microsoft and the DOJ have been actively seizing domains used by Star Blizzard in their phishing schemes.
Already a member? Log in here