US Defense & NGOs fall prey to Russian hackers

Threat Level

Actors Report

For a detailed threat advisory, download the pdf file here

Summary

Russian state-sponsored group Calisto is linked to spoofing Microsoft login pages of Global Ordnance, a legitimate U.S. military weapons and hardware supplier. According to some, the themed domains are likely an attempt to masquerade as authentic parties in social engineering campaigns by the adversary.