highCyber Attacks
Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts
Suspected Russian cyber espionage clusters UNC6293, UNC7005, and UNC5976 are abusing legitimate Google OAuth and WhatsApp linking flows to hijack accounts of individuals in academia, aerospace, defense, government, and think tanks across Europe and the U.S. The campaigns are persistent and adaptive, exploiting trusted authentication mechanisms to bypass security controls.
The Hacker News2 min read