{"id":12799,"date":"2025-08-04T07:52:21","date_gmt":"2025-08-04T06:52:21","guid":{"rendered":"https:\/\/visegradpost.com\/?p=12799"},"modified":"2025-08-04T07:52:21","modified_gmt":"2025-08-04T06:52:21","slug":"microsoft-uncovers-russian-hackers-in-jaw-dropping-attack-on-us-and-allied-embassies-is-cybersecurity-now-a-global-crisis","status":"publish","type":"post","link":"https:\/\/visegradpost.com\/en\/2025\/08\/04\/microsoft-uncovers-russian-hackers-in-jaw-dropping-attack-on-us-and-allied-embassies-is-cybersecurity-now-a-global-crisis\/","title":{"rendered":"Microsoft Uncovers Russian Hackers in “Jaw-Dropping” Attack on US and Allied Embassies: Is Cybersecurity Now a Global Crisis?"},"content":{"rendered":"
\n\n\n\n\n
IN A NUTSHELL<\/strong><\/td>\n<\/tr>\n
\n
    \n
  • \ud83d\udd0d Secret Blizzard<\/strong>, a Russian-state hacking group, has been targeting foreign embassies in Moscow with sophisticated cyber attacks.<\/li>\n
  • \ud83d\udcbb The group uses adversary-in-the-middle<\/strong> tactics at the ISP level to reroute communications to malicious websites.<\/li>\n
  • \ud83d\udee1\ufe0f ApolloShadow<\/strong> malware is deployed to install a TLS root certificate, allowing hackers to impersonate trusted sites.<\/li>\n
  • \ud83c\udf10 Microsoft advises using encrypted tunnels<\/strong> to mitigate risks and protect sensitive diplomatic communications.<\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/figure>\n

    The digital landscape is constantly evolving, and with it, the threats posed by cyber attackers. Recently, Microsoft issued a warning about a sophisticated campaign targeting foreign embassies in Moscow. This operation, orchestrated by Russian-state hackers, utilizes adversary-in-the-middle attacks at the ISP level to install custom malware. Known as Secret Blizzard, this group has been active for decades, posing significant risks to diplomatic personnel and potentially influencing international relations.<\/p>\n

    Understanding the Adversary-in-the-Middle Tactic<\/h2>\n

    Adversary-in-the-middle (AitM) attacks represent a formidable threat in the cybersecurity realm. In these attacks, hackers position themselves between their target and the intended destination, enabling them to intercept and manipulate communications. This method is particularly dangerous when orchestrated at the Internet Service Provider (ISP) level, as it grants attackers extensive access and control.<\/p>\n

    Secret Blizzard, a Russian state-backed group, has leveraged this tactic to great effect. By using ISPs in Russia, which are often required to comply with government mandates, the group can reroute embassy communications to malicious websites. These sites are crafted to appear legitimate, increasing the likelihood of a successful attack. The primary objective of these operations is to deploy malware that facilitates intelligence gathering, a critical concern for international diplomats operating in Moscow.<\/p>\n

    “Aeroflot Hacked and Flights Grounded” as Russia\u2019s Largest Airline Paralyzed by Cyberattack in Major Blow to National Infrastructure<\/a><\/p><\/blockquote>\n