Midnight Blizzard conducts large-scale spear-phishing campaign using RDP files

This document is a consolidated table of domains resembling cloud provider and government service names (likely typosquatting or spoof domains). No contextual information, attribution, or evidence of active malicious use is provided, but the list can serve as potential indicators for detection, blocking, or further investigation.