Russian Hackers Target Kremlin Critics in New Phishing Campaign

Hackers linked to Russian intelligence are executing a global phishing campaign targeting Kremlin critics, according to research by Citizen Lab and Access Now. The operation, involving groups Cold River and Coldwastrel, has aimed at Russian opposition figures, U.S. and EU officials, and media since 2022, risking serious consequences for victims.

Research by digital rights groups Citizen Lab and Access Now reveals that hackers associated with Russian intelligence are launching phishing attacks targeting Kremlin critics worldwide.

The campaign, part of a larger internet espionage operation, has been active since 2022 and includes figures from Russian opposition in exile, U.S. and EU nonprofit staff, media, and academics. U.S. officials are monitoring the situation closely to prevent cyberattacks on the 2024 presidential election.

Victims, some within Russia, face significant risks, and attackers are impersonating known contacts to increase email credibility. Citizen Lab links the campaign to the Russian groups Cold River and Coldwastrel, which support the Federal Security Service (FSB). The Russian embassy has not responded to inquiries.

(With inputs from agencies.)