From Invoice to AnyDesk: Uncovering a Phishing Campaign Targeting Russian Aerospace Organizations

A sophisticated spear-phishing campaign, likely linked to the Rare Werewolf group, is targeting Russian aerospace organizations by abusing legitimate tools like AnyDesk and Blat to establish covert, persistent remote access and exfiltrate sensitive data while blending into normal system activity.