GRU's BlueDelta Targets Key Networks in Europe with Multi-Phase Espionage Campaigns

Insikt Group outlines GRU-affiliated BlueDelta’s April–December 2023 espionage campaign across Europe, describing deployment of Headlace information-stealing malware and sophisticated credential-harvesting pages that target Ukraine’s Ministry of Defence, European transportation networks, and an Azerbaijani think tank; the report highlights phishing, geofencing, exploitation of legitimate internet services, and living-off-the-land binaries used to evade detection and relay MFA/CAPTCHA challenges.