TA446 Deploys DarkSword iOS Exploit Kit in Targeted Spear-Phishing Campaign
Threat actors with connections to Russia are using the recently revealed DarkSword exploit kit to target iOS devices in a targeted email campaign, according to information released by Proofpoint.
The Russian state-sponsored threat group TA446, which is also monitored by the larger cybersecurity community under the names Callisto, COLDRIVER, and Star Blizzard (previously SEABORGIUM), has been highly confidently linked to the activity. It is believed to be connected to the Federal Security Service (FSB) of Russia.
The hacker collective is well-known for spear-phishing attempts to get login credentials from potential targets. But over the past year, the threat actor has launched attacks that have targeted users' WhatsApp accounts and used several proprietary malware families to steal p...