US and Microsoft Take Action Against Russian Hacking Group Targeting American Officials and Nonprofits

A hacking group linked to Russian intelligence has been targeting Western think tanks, journalists, and former military officials. Microsoft and US authorities revealed this on Thursday. Known as Star Blizzard, the group used spear phishing emails to infiltrate victims' systems. These emails appeared to come from trusted sources, aiming to steal information and disrupt operations.

Star Blizzard's tactics were described as persistent and sophisticated by Microsoft. The group conducted thorough research on its targets before launching attacks. They also targeted civil society groups, US companies, military contractors, and the Department of Energy. This department oversees many nuclear programmes.

Cybersecurity Threats and Legal Actions

On Thursday, a US court unsealed documents allowing Microsoft and the Department of Justice to seize over 100 website domain names linked to Star Blizzard. This followed a lawsuit filed by Microsoft and the NGO-Information Sharing and Analysis Centre. This nonprofit tech organisation investigated Star Blizzard's activities.

Authorities have not detailed Star Blizzard's success rate but anticipate continued Russian cyberattacks against the US and its allies. "The Russian government ran this scheme to steal Americans' sensitive information," Deputy Attorney General Lisa Monaco stated. She emphasised ongoing efforts to expose Russian cybercriminals with private sector support.

International Impact and Historical Context

Star Blizzard is associated with Russia's Federal Security Service (FSB). Last year, British authorities accused them of a long-term cyberespionage campaign against UK lawmakers. Microsoft has been monitoring Star Blizzard since 2017, noting their elusive nature in cybersecurity efforts.

Since January 2023, Microsoft observed Star Blizzard attempting dozens of hacks targeting 30 different groups. The group's ability to adapt and hide its identity poses ongoing challenges for cybersecurity professionals, according to Microsoft's report.

Global Reach of Cyberattacks

US authorities charged two Russian men last year for past actions linked to Star Blizzard. Both are believed to be in Russia. Besides American targets, Star Blizzard also attacked individuals and groups across Europe and other NATO countries, especially those supporting Ukraine after Russia's invasion.

A message sent to the Russian Embassy in Washington was not returned on Thursday. The ongoing threat from such cyberattacks highlights the need for vigilance in protecting sensitive information globally.