RUSSIA'S FANCY BEAR APT DOUBLES DOWN ON GLOBAL SECRETS THEFT

Summary from the TLDR InfoSec newsletter

The Russian Fancy Bear APT has been carrying out a low-complexity, spear-phishing campaign targeting governments or organizations of strategic value to Russia. The phishing emails contain a link to a document that the target believes is relevant, which then redirects them to a phishing page for an email or VPN provider. While Fancy Bear is better known for more sophisticated malware campaigns, this campaign may have been chosen as a low-cost effort to gain access to notable organizations.