AMAZON BLOCKS APT29 CAMPAIGN TARGETING MICROSOFT DEVICE CODE AUTHENTICATION

Summary from the TLDR InfoSec newsletter

Amazon disrupted a Russian APT29 watering hole campaign that injected malicious JavaScript into compromised websites, redirecting visitors to fake Microsoft device authentication pages designed to harvest credentials from academics and Russian critics.