Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts
Three distinct suspected Russian cyber espionage threat clusters have been observed leveraging legitimate authentication flows to single out individuals working in academia, aerospace and defense, governments, and think tanks across Europe, as well as academia and think tanks within the U.S. These clusters include UNC6293, UNC7005, and UNC5976. "These clusters engage in persistent, adaptive
What happened
Three distinct suspected Russian cyber espionage threat clusters have been observed leveraging legitimate authentication flows to single out individuals working in academia, aerospace and defense, governments, and think tanks across Europe, as well as academia and think tanks within the U.S. These clusters include UNC6293, UNC7005, and UNC5976. "These clusters engage in persistent, adaptive
Why it matters
The incident may affect operational continuity, asset safety or trust around Google. Watch for verified scope and remediation.
Affected entities
View evidence
1 reports · 1 original report · 1 independent
- The Hacker NewsPrimary source · Supports · EN · 100%Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts ↗
Claims
- Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts Observed
Conflicts
No material conflict detected in the available evidence.
Timeline
- First reported
- Unverified · 58/64%
Market move following event
Market reaction is not yet available for this asset and time window.