Kazakh oil giant denies cyberattack, says incident was 'planned' phishing drill

Seqrite reported that a newly identified Russian-linked group called NoisyBear targeted Kazakhstan’s KazMunayGas in a phishing campaign that compromised a finance mailbox and distributed malicious archive files; KazMunayGas countered that the activity was a scheduled internal phishing exercise, citing test accounts and prior notification, leaving the external vendor’s attribution and evidence unconfirmed.