Skip to content
Threat Feed
Subscribe

Actor

UNC7005

1 brief RSS
high threat

Russian Threat Clusters UNC6293, UNC7005, and UNC5976 Targeted OAuth and Device Code Phishing Campaigns

Three suspected Russian threat clusters are actively conducting targeted phishing campaigns using OAuth abuse, device code manipulation, and AitM attacks via compromised Wi-Fi gateways to hijack credentials and deploy infostealers.

Google Cloud +2 UNC7005 phishing espionage oauth-abuse aitm credential-theft
3t