CTI · corroborated · 2026-08-21

Russian Hackers Trick Academics and Diplomats Into Giving Them Access to Email and WhatsApp

Full story & timeline

MITRE ATT&CK

• T1684 Social Engineering Stealth
• T1598 Phishing for Information Reconnaissance
• T1528 Steal Application Access Token Credential Access
• T1621 Multi-Factor Authentication Request Generation Credential Access
• T1550 Use Alternate Authentication Material Lateral Movement
• T1078 Valid Accounts Stealth

Indicators

No curated indicators tied to this case.

Detections

No detection content yet — case analysis did not yield signal-specific telemetry. Check back after the next daily CTI pass.

References

• https://cyberpress.org/russian-hackers-trick-academics-and-diplomats-into-giving-them-access/
• https://gbhackers.com/russia-linked-hackers-exploit-legitimate-login-flows/