Going with the Flow(s): Distinct Clusters Target Individuals of Interest to Russia

Three distinct Russian cyber espionage clusters are aggressively targeting high-value individuals in academia, government, and defense by abusing legitimate authentication flows—such as app passwords, OAuth, and device linking—making their phishing and malware campaigns harder to detect and attribute, and increasing the risk of stealthy account compromise and data exfiltration.