Russian, Ukraine-Linked Hackers Escalate Cyberwarfare

Microsoft has confirmed that Secret Blizzard, a Russian state-sponsored hacking group linked to the FSB, is targeting foreign embassies in Moscow using advanced adversary-in-the-middle (AiTM) tactics at the ISP level. The group utilizes custom malware, ApolloShadow, to install trusted root certificates and intercept secure communications, granting persistent access to sensitive diplomatic data. This campaign, ongoing since at least 2024, leverages Russia's surveillance infrastructure and cooperation from local ISPs, putting embassy personnel using Russian internet at risk. Separately, the Ukraine-aligned hacker group Silent Crow claimed responsibility for a major cyberattack on Aeroflot, Russia's flagship airline, disrupting critical IT systems. The attack reportedly involved months of covert access to Aeroflot's internal networks, impacting flight operations and passenger services. These incidents underscore the intensifying and sophisticated cyberwarfare between Russia and Ukraine.