Russia, China Cited in Global Cyber Espionage Surge

Australia's intelligence chief reported the disruption of 24 significant foreign espionage operations since 2022, naming Russia, China, and Iran as persistent threats, with a focus on the AUKUS nuclear submarine program. Concurrently, Microsoft and other cybersecurity experts revealed that Russia's FSB-affiliated group, Secret Blizzard (Turla), has been conducting a sophisticated cyber espionage campaign targeting foreign embassies in Moscow and potentially other domestic entities. The attackers exploit Russian ISPs and domestic intercept systems to deploy malware like ApolloShadow, using adversary-in-the-middle tactics and fake certificates to compromise devices and intercept secure communications. This marks the first confirmed case of Russian cyber espionage at the ISP level targeting both foreign and domestic targets. The campaign poses significant risks to diplomatic missions and highlights the vulnerability of those relying on local internet providers. These developments underscore the intensifying nature of state-sponsored cyber threats and the broadening scope of international espionage.