Cybersecurity incident — 2023-03-14 00:00:00
Affected organization: Diplomatic entities and government agencies in Eastern Europe
Affected country: Undetermined
Industry: Public Administration
Event type: Exploitive
Event subtype: Exploitation of End Host
Motive: Political-Espionage
Actor: SVR (COZYBEAR)
Actor type: Nation-State
Actor country: Russian Federation

Researchers from BlackBerry reveal that the Russian state-backed group known as Nobelium is behind recent attempted cyberattacks on diplomatic entities and government agencies in the European Union via phishing emails with a malicious document attached, using the Polish Foreign Minister's recent visit to the US as a lure.