RST TI Report Digest: 08 Dec 2025
ID: 510816f3-b04b-53c9-abee-8f6ebc0188f3
STIX ID: report--510816f3-b04b-53c9-abee-8f6ebc0188f3
Feed Name: RST Cloud Blog
Threat Score
In May–June 2025 the Calisto intrusion set targeted Reporters Without Borders with spear-phishing that impersonated trusted contacts via ProtonMail; attackers used a custom credential-harvesting kit employing Adversary-in-the-Middle (AITM)/ClickFix techniques to relay 2FA and steal credentials, and the report includes extensive IOCs (IP, domains, URLs) tied to the campaign.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.