State-Sponsored Russian Phishing Campaigns Target a Variety of Industries

IBM X-Force warns that ITG05 (APT28/Fancy Bear) is conducting ongoing, globally distributed phishing campaigns that use realistic lure documents and intentionally blurred images to entice victims to click links which retrieve staged payloads (hosted on firstcloudit.com) and deploy MASEPIE malware; targets include governments, NGOs, and critical sectors and the actor is assessed to continue adapting and conducting espionage operations.