When Getting Phished Puts You in Mortal Danger

Researchers uncovered a coordinated phishing campaign impersonating Ukrainian paramilitary and intelligence websites (e.g., Freedom of Russia Legion, Russian Volunteer Corps, Ukrainian MoD/GDI, and the CIA) to harvest personal information via cloned sites and Google Forms; the campaign appears promoted by manipulating search-engine results and hosted on a bulletproof provider (Stark Industries Solutions). Silent Push and independent investigators believe the effort is likely run by Russian intelligence or aligned actors and warn the sites have real-world consequences, including arrests and severe sentences for those identified.