Cybersecurity incident — 2022-05-03 00:00:00
Affected organization: Government and defense officials, politicians, NGOs and think tanks, and journalists
Affected country: Undetermined
Industry: Public Administration
Event type: Exploitive
Event subtype: Exploitation of End Host
Motive: Political-Espionage
Actor: SVR (Calisto)
Actor type: Nation-State
Actor country: China

Google's Threat Analysis Group reveals that the Russian threat actor Calisto is targeting government and defense officials, politicians, NGOs and think tanks, and journalists via phishing links directly in the email, linking to PDFs and/or DOCs hosted on Google Drive and Microsoft One Drive.