Zydeca
354 posts

Zydeca
@Zydecaa
Former Threat Researcher at Proofpoint. ✿ Exclaimer of meeps. ✿ Parent to servers. ✿ Drinker of tea, Earl Grey, Hot. ✿ Former @FBI ✿ My opinions are my own.





A recent #TA499 information ops campaign recently experienced moderate success on Twitter, including engagement from CEO Elon Musk 🌚. More info on Russia aligned TA499 and its malicious social engineering attacks👇 Blog: ow.ly/tCaM50NG5EI Podcast: ow.ly/1Mo150NG5Im




1/4: TA499 is an information operation threat actor publicly known as Vovan & Lexus. @proofpoint analysts have tracked and blocked scores of attempts to reach out to politicians, CEOs, and celebrities that have spoken out against the war in Ukraine. Blog: ow.ly/5vnm50NaUgT


A new report dropped this morning from one of my wonderful peers @Zydecaa and the Threat Research Team. #TA499 (#RU - #Russia - #APT), a State-Encouraged Actor, has been targeting North American and European government officials as well as CEOs with video calls 🧵👇

2/4: Throughout 2021 and 2022, email lures emphasized urgency and timeliness. In the lead-up to the war, TA499’s email lures shifted from a focus on Russian opposition to the arming of Ukraine and Ukraine's NATO status.

🇷🇺 intelligence attempted to procure data from Ukraine's international partners via email from a fake account alleging to be foreign affairs advisor of 🇺🇦 PM Shmyhal Olena Kotlyarova, who is his only foreign affairs advisor, reported this on FB facebook.com/10001429875071…

From Oct. 2022 to Jan. 2023, @proofpoint observed tens of thousands of email messages targeting organizations in the U.S. 🇺🇸 and Germany 🇩🇪. We associate this activity with highly organized and financially motivated threat actor, #TA866. Full report: ow.ly/izlq50MMGJF


🚨 Today, the UK has issued an advisory highlighting the continued threat from spear-phishing campaigns carried out by Russia-based group SEABORGIUM and Iran-based group TA453. ncsc.gov.uk/news/uk-cyber-…







