ukraine ngos

About this tag
Discussions on WindowsForum.com about Ukraine NGOs focus on Russian cyber-espionage campaigns that exploit OAuth to compromise Microsoft 365 accounts. Recent threads detail attacks by threat actors UTA0352 and UTA0355, who use phishing emails with video conference invites to steal OAuth tokens and gain persistent access to NGO accounts. The content covers attack mechanics, including token generation and abuse, and highlights the targeting of Ukraine-linked organizations. These threads provide technical analysis of the threats and offer insights into defending against OAuth-based attacks, relevant for IT security professionals and organizations working with Ukrainian NGOs.
  1. How OAuth Attacks Are Targeting Ukrainian NGOs in Russian Cyber-Espionage Campaigns

    If you’re going to be phished, you might as well be courted by some of Russia’s digital finest—at least that’s what a fresh report from Volexity would lead you to believe, as Ukraine-linked NGOs have found themselves starring in an unexpected cyber-espionage romcom, with the Russian hacking...
  2. Russian Threat Actors Exploit OAuth to Hack Microsoft 365 Accounts of Ukraine-Linked NGOs

    In a recent development, Russian threat actors identified as UTA0352 and UTA0355 have been targeting Ukraine-linked nongovernmental organizations (NGOs) by exploiting the OAuth protocol to compromise Microsoft 365 accounts. The Mechanics of the Attack The attackers initiated their campaign with...