Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts

Suspected Russian hackers are exploiting Google OAuth and WhatsApp linking to take control of accounts. They are targeting individuals in academia, aerospace and defense, governments, and think tanks in Europe and the US. The hackers are part of three distinct threat clusters, identified as UNC6293, UNC7005, and UNC5976. These clusters are known for their persistent and adaptive tactics. They use legitimate authentication flows to single out their targets. The attacks focus on specific sectors and geographic regions.