- Category
- Latest news
Microsoft Uncovers Russian Cyber Operation Targeting Foreign Embassies in Moscow
- Authors
![Photo of Vlad Litnarovych]( "Photo of Vlad Litnarovych")
A Russian state-linked hacking group has been conducting a sweeping cyberespionage operation targeting foreign embassies and diplomats in Moscow, according to a report from Microsoft’s Threat Intelligence team on July 31.
The group behind the campaign—known as Secret Blizzard, also tracked as Turla, Waterbug, or Venomous Bear—is believed to be tied to Unit 16 of Russia’s FSB, the country’s main security agency. The US Cybersecurity and Infrastructure Security Agency (CISA) previously confirmed the group’s affiliation with the Russian state.
According to Microsoft, Secret Blizzard has been infecting devices that connect to Russian internet service providers with a sophisticated malware strain dubbed ApolloShadow.
-0fbfaea359cd2b00ddf9d206db1c87eb.png)
The malware disguises itself as legitimate antivirus software, but in reality, it enables hackers to gain deep access to sensitive information on compromised devices.
ApolloShadow’s capabilities are far-reaching. It can install fake root certificates, allowing the interception and modification of even encrypted internet traffic. The malware can also harvest login credentials, authentication tokens, and other vital information while creating hidden administrator-level accounts to maintain persistent access.
-9c3cee19ded0f41029d2ca3476513550.jpg)
By leveraging its privileged access through Russian ISPs, the group can monitor nearly all online activity within diplomatic missions, including private communications and classified documents related to international negotiations.
“This campaign marks the first known case where hackers have used state-sanctioned access to internet providers to launch cyberattacks,” Microsoft noted in its report.
Earlier, authorities in Russia’s Krasnoyarsk region imposed “temporary restrictions” on mobile internet access, citing vague national security concerns—yet offering few specifics, with Governor Mikhail Kotyukov confirming the measure.
