Microsoft and the US Department of Justice to disrupt the operations of a Russian hacking group known as ColdRiver

The article reports on a joint effort by Microsoft and the US Department of Justice to disrupt the operations of a Russian hacking group known as ColdRiver. This group, linked to the Russian Federal Security Service (FSB), has been engaged in spear-phishing attacks targeting US government employees, non-profit organizations, and defense contractors. The agencies seized over 100 domains used by ColdRiver, dismantling their infrastructure and hindering their ability to launch further attacks. ColdRiver has been active since at least 2017, using social engineering and open-source intelligence to target victims. The US government has also sanctioned two ColdRiver operators and offered a reward for information leading to the capture of other members.