Russian Laundry Bear cyberspies linked to Dutch Police hack

Dutch intelligence agencies (AIVD/MIVD) attribute a September 2024 Dutch police data breach to Laundry Bear (aka Void Blizzard), a Russian-aligned cyberespionage group that accessed a police employee’s account via a pass-the-cookie attack using a session cookie obtained through infostealer malware, exfiltrating work-related contact details from the Global Address List. Active since at least April 2024, the group targets EU and NATO entities with spear-phishing and stolen credentials to harvest and exfiltrate sensitive files and emails, posing heightened risks to critical sectors.