U.S. authorities and Microsoft say hackers linked to Russian intelligence targeted dozens of former military and intelligence officials, journalists and civil society groups with a sophisticated campaign designed to steal information.

Since the start of 2023, Microsoft had observed Star Blizzard attack over 30 organizations including NGOs, journalists, and think tanks. The attacks primarily consisted of a spear phishing campaigns to exfiltrate sensitive data from victims and obstruct activities aimed at preserving democratic processes.

The Justice Department seized 41 domains named via warrant, while Microsoft managed to seize 66 domains through civil action. Collectively, the domains are claimed to have been used by a Russian nation-state actor Microsoft Threat Intelligence tracks as Star Blizzard, a group also known by the names of SEABORGIUM and Callisto Group.