Security News > 2023 > April > Google: Ukraine targeted by 60% of Russian phishing attacks in 2023

Google's Threat Analysis Group has been monitoring and disrupting Russian state-backed cyberattacks targeting Ukraine's critical infrastructure in 2023.
Google reports that from January to March 2023, Ukraine received roughly 60% of the phishing attacks originating from Russia, making it the most prominent target.
The first is Sandworm, tracked by Google as "FrozenBarents," which has focused its attacks on the energy sector across Europe since November 2022, with a highlighted case involving the Caspian Pipeline Consortium.
Another highly-active Russian threat actor is APT28, tracked by Google as "FrozenLake."
"In the first quarter of 2023, TAG observed a coordinated IO campaign from actors affiliated with the Internet Research Agency creating content on Google products such as YouTube, including commenting and upvoting each other's videos," reads the Google TAG report.
Google reports that it has been observing and blocking IRA-linked accounts creating content on YouTube Shorts to promote specific "News-like" narratives about the war in Ukraine to Russian domestic audiences.
News URL
Related news
- Russian Star Blizzard Targets WhatsApp Accounts in New Spear-Phishing Campaign (source)
- Ransomware gangs pose as IT support in Microsoft Teams phishing attacks (source)
- Google takes action after coder reports 'most sophisticated attack I've ever seen' (source)
- Microsoft Teams phishing attack alerts coming to everyone next month (source)
- E.U. Sanctions 3 Russian Nationals for Cyber Attacks Targeting Estonia’s Key Ministries (source)
- Google to Iran: Yes, we see you using Gemini for phishing and scripting. We're onto you (source)
- Google says hackers abuse Gemini AI to empower their attacks (source)
- Google fixes Android kernel zero-day exploited in attacks (source)
- How to Prevent Phishing Attacks with Multi-Factor Authentication (source)
- 7-Zip MotW bypass exploited in zero-day attacks against Ukraine (source)