A Russia-linked group known as Callisto or ColdRiver attempted to phish Reporters Without Borders (RSF) in March using a decoy document lure, a tactic previously employed against other NGOs and government bodies. The phishing attempt was detected and thwarted when ProtonMail blocked the attacker’s account, preventing the victim from being redirected to a credential-harvesting site.
Edward Kiledjian
@ekiledjian