Skip to content
Threat Feed
Subscribe

Actor

ICE RELIC

1 brief RSS
high threat

Russian-Linked Clusters Abuse Authentication Flows for Targeted Credential Theft

Suspected Russian threat clusters UNC6293 and UNC7005 are abusing legitimate OAuth, app password, and device code authentication workflows to bypass MFA and compromise high-value targets in academia, government, and defense.

Microsoft Account +1 ICE RELIC phishing credential-theft oauth espionage ice-relic
3t 1i