Google's Threat Intelligence Group Tracks 3 Distinct Suspected Russian Cyber Espionage Threat Clusters
Google says it is tracking suspected Russian cyber espionage clusters
Aug. 20 (Reuters) - Google:
- Google Threat Intelligence Group is tracking three distinct suspected Russian cyber espionage threat clusters - blog
- Google now tracks two distinct suspected Russian clusters, UNC7005 and UNC5976, which conduct phishing, abuse OAuth flows, and deploy malware to victims
- UNC7005 in particular is tied to hospitality captive portal redirects reported on by ReliaQuest and Microsoft
- In May and June 2026, UNC7005 conducted social engineering operations spoofing WhatsApp
