Russian Hackers Pose as Cyber Firm to Spy on Embassies (1)

July 31, 2025, 4:35 PM UTC

A notorious Russian hacking group is impersonating a prominent cybersecurity firm and using the country’s internet providers to spy on foreign embassies, according to a report published Thursday by Microsoft Corp.

The attackers, a group known as Turla or Secret Blizzard, engaged in a “large scale” cyber-espionage campaign in which they used Russian internet service providers, or ISPs, to conduct their hacks, according to Microsoft. Turla hackers also disguised their malware to impersonate cybersecurity software from the Russian cybersecurity company Kaspersky.

With access to those Russian ISPs, the hackers then targeted foreign embassies in Moscow, redirecting victims’ internet ...

Learn more about Bloomberg Law or Log In to keep reading:

Learn About Bloomberg Law

AI-powered legal analytics, workflow tools and premium legal & business news.

Already a subscriber?

Log in to keep reading or access research tools.