Russia-linked hackers targeting European diplomats with invites to bogus wine tasting events
A Russia-linked hacking group unleashed a new "advanced phishing campaign" targeting European diplomats with invites to fake wine tasting events, according to a report.
Check Point Research said the APT29 group is trying to "impersonate a major European Ministry of Foreign Affairs to send out invitations to wine tasting events, prompting targets to click a web link leading to the deployment of a new backdoor [malware] called GRAPELOADER."
"This campaign appears to be focused on targeting European diplomatic entities, including non-European countries' embassies located in Europe," the cybersecurity firm said in an advisory, noting that the emails with malicious links included subject lines such as "Wine tasting event (update date)," "For Ambassador's Calendar" and "Diplomatic dinner."
The U.S. Cybersecurity and Infrastructure Security Agency said last year that APT29, which also goes by the names of Midnight Blizzard, the Dukes, or Cozy Bear, is "a cyber espionage group, almost certainly part of the SVR, an element of the Russian intelligence services."
Check Point Research said Tuesday that APT29 is "known for targeting high-profile organizations, including government agencies and think tanks" and that "their operations vary from targeted phishing campaigns to high-profile supply chain attacks that utilize a large array of both custom and commercial malware."
"Throughout the [new] campaign, the targets include multiple European countries with a specific focus on Ministries of Foreign Affairs, as well as other countries' embassies in Europe. In addition to the emails we've identified, we found indications of limited targeting outside of Europe, including of diplomats based in the Middle East," it also said.
Check Point Research said the phishing attacks started in January of this year.
"In cases where the initial attempt was unsuccessful, additional waves of emails were sent to increase the likelihood of getting the victim to click the link and compromise his machine," it added.
"The server hosting the link is believed to be highly protected against scanning and automated analysis solutions, with the malicious download triggered only under certain conditions, such as specific times or geographic locations. When accessed directly, the link redirects to the official website of the impersonated Ministry of Foreign Affairs," the firm continued.
It is unclear if any of the phishing attacks were successful.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Yahoo
5 minutes ago
- Yahoo
EU could approve Mercosur deal by summer, agriculture chief says
By Kate Abnett BRUSSELS (Reuters) -The European Union could approve its planned trade deal with South American bloc Mercosur before summer, but it has not yet fixed a date to do so, EU agriculture commissioner Christophe Hansen told Reuters on Thursday. "It could be before summer," Hansen said in an interview. EU nations still need to approve the deal, which was finalised in December but has faced opposition from members including France, which argues that the pact would hurt European farmers who face stricter norms and regulations than their South American peers. French President Emmanuel Macron and Brazil's President Luiz Inacio Lula da Silva discussed their differences on the pact at a meeting in Paris on Thursday. Macron said the text could be improved with the insertion of mirror clauses. France has previously argued for the insertion of an emergency break clause to restrict imports if a sudden surge in imports destabilises certain EU markets. "This would indeed require that we go back to the table and reopen. I don't think that this would be helpful in this situation," Hansen said of the idea of resuming negotiations with Mercosur countries to add new safeguards to the deal. "I see from many different parts of the agriculture and food sector, they are really looking for having these new opportunities," he added.
Yahoo
13 minutes ago
- Yahoo
Exclusive-Aide to EU chief joins tariff negotiation team to spur US talks, sources say
By Julia Payne and Jan Strupczewski BRUSSELS (Reuters) -The European Union has changed its team locked in trade talks with the Trump administration, bringing in a close aide to European Commission President Ursula von der Leyen to deal more swiftly with political questions arising from the technical negotiations, three sources familiar with the talks said. The move follows frequent outbursts of frustration by U.S. President Donald Trump at what the White House perceives as slow progress in talks with the EU. Late in May he recommended a 50% tariff on most European goods from June, before backtracking. The move to bring more political decision-making to the EU team reflects challenges confronting the bloc as it negotiates a trading relationship with a U.S. president who has said repeatedly the EU was established to screw the United States. It also reflects the difficulties negotiating trade terms in isolation when Trump has sought to fold non-tariff barriers such as digital services taxes and food standards into the talks. "If you are a trade negotiator you need to be sure you have full political backing, so if the top level is there you feel stronger," one of the sources said. The expanded team, which apart from the von der Leyen aide now also includes a cabinet member of Trade Commissioner Maros Sefcovic, was dispatched to Washington this week after a call between Trump and von der Leyen in which they agreed to fast-track negotiations. Following that call Trump agreed to allow more time for talks between Washington and the 27-nation bloc to produce a deal by July 9. "It was a merger of Commission layers to reinforce and act fast," a second of the sources said of the team's expansion, adding the team's shape could change again as talks continue. U.S. Trade Representative Jamieson Greer said a meeting with Sefcovic in Paris on Wednesday had been constructive and that he was pleased negotiations were advancing quickly. He noted "a willingness by the EU to work with us to find a concrete way forward to achieve reciprocal trade". Sefcovic told reporters that both sides had concluded talks were "advancing in the right direction, at pace," and that high-level contacts would follow shortly. He and Greer had agreed how to "restructure" the focus of negotiations with the United States, he added. Washington was focused on four areas in its negotiations with other countries: tariffs, non-tariff barriers, purchases and economic security, one of the sources said. Trump has already hit Europe with a 50% tariff on steel and aluminium as well as a heightened levy on car imports. The EU is racing to secure a deal before July 9 when "reciprocal" tariffs on most other goods could surge from 10% to as high as 50%. Unlike Britain, the first major economy to reach a narrow trade agreement with the Trump administration, the EU is pushing for a comprehensive deal, with a baseline tariff rate below the 10% now in force. Two of the three sources said additional technical expertise had also been added to the negotiating team, but there had been no changes to the team's leadership. "I think it suits everyone to have the political cover," the first source said.
Yahoo
23 minutes ago
- Yahoo
Trump thought Zelensky's Russian air base strikes were ‘badass'
Donald Trump was so impressed by Ukraine's audacious drone raids on Russian warplanes that he described them as 'badass' to aides. Mr Trump has kept unusually quiet about the Sunday attack on airfields deep inside Russia as he tries to keep both sides talking to each other. But a report published on Thursday revealed he thought the strikes were 'strong' even as he worried that it would make peace efforts more complicated. 'He thought it was badass,' a source told Axios. An adviser said: 'From an international perspective, you've got a chihuahua inflicting some real damage on a much bigger dog.' Kyiv's weekend strikes on airfields destroyed and damaged nuclear-capable aircraft and infuriated Moscow. 'Operation Spider's Web' was reportedly 18 months in the planning. But it leaves Mr Trump with a dilemma. Throughout his dealings with Moscow and Kyiv he has openly worried that the conflict could lead to a Third World War, and influential voices in his Maga coalition, such as Steve Bannon, have publicly warned Ukraine's strikes were 'escalatory' and likely to trigger a brutal Russian response. A third source told Axios: 'We want this war to end. We want it to de-escalate. So if Putin goes crazy in response, yeah, the president has concerns.' Mr Trump has shied from adding extra sanctions or heaping more pressure on Russia to force it to compromise. He spoke to Mr Putin by phone on Wednesday. He posted on social media afterwards: 'President Putin did say, and very strongly, that he will have to respond to the recent attack on the airfields.' The Russian president has repeatedly rejected calls for a 30-day ceasefire, insisting that it would simply allow Ukraine to rearm and reorganise. The result is an impasse for Mr Trump, who came to power promising to end the conflict on day one of his presidency. On Thursday, Moscow said it would decide 'how and when' to respond. When Dmitry Peskov, the Kremlin spokesman, was asked what Russia's response would be, he said: 'As and when our military deems it appropriate.' The issue is reaching a crucial round of diplomacy. Mr Trump hosts Friedrich Merz, the new German chancellor, at the White House on Thursday. Germany is the second biggest backer of Ukraine after the US. Then he flies to Canada for a G7 summit followed by a Nato meeting in the Netherlands before the end of the month.
