Pro‑Russian hackers target officials with fake WhatsApp invites
The pro-Russian hacker group Star Blizzard, linked to the Russian Federal Security Service (FSB), attempted to hack government officials' accounts on WhatsApp by posing as American officials, reports "The Guardian."
The pro-Russian hacker group Star Blizzard, associated with the Russian Federal Security Service (FSB), made an attempt to hack government officials' accounts on WhatsApp.
Hackers impersonated American officials, as revealed by the British newspaper "The Guardian," citing a report from Microsoft’s Threat Intelligence team.
New tactics of hackers
Star Blizzard used a method of sending fake group invitations on WhatsApp, which were supposedly to support Ukrainian NGOs.
The Microsoft Threat Intelligence team warns that scanning the QR code in such messages could have allowed hackers to access the victim's WhatsApp messages. However, it is unclear if they managed to extract any data.
Strategy change
The fake invitation campaign ended in November, but Microsoft notes that this indicates a change in Star Blizzard’s tactics. Users are warned against clicking links from unknown senders.
"The Guardian" emphasizes that the UK's National Cyber Security Centre (NCSC) links Star Blizzard to the FSB, accusing the group of attempting to undermine trust in the politics of the UK and other countries.
Targets of hacking attacks
Star Blizzard most frequently targets individuals associated with governments, diplomacy, and researchers dealing with defense policy and international relations, especially in the context of Russia and aid to Ukraine.
In 2023, the NCSC reported attacks on British MPs, universities, and journalists, aiming to interfere with British politics and democracy. The group was described as "almost certainly subordinate" to the FSB.
Following these reports, the government in London imposed sanctions on two members of Star Blizzard, including an FSB officer.
