A sophisticated spear-phishing campaign using Signal targeted Armenia’s civil society and government figures, employing fake personas to lure victims into clicking malicious links. The campaign’s infrastructure was highly transient, indicating advanced operational tactics and real-time adaptability by threat actors like UNC5792. #UNC5792 #SignalPhishing
Keypoints
- The campaign targeted high-profile political and institutional figures in Armenia.
- Attackers used a fake persona, “Armine Poghosyan,” to build trust via Signal messaging.
- Malicious URLs hosted on short-lived domains were instrumental in the attack.
- The infrastructure’s temporary nature complicated forensic analysis efforts.
- Threat actors demonstrated live monitoring and quick response capabilities.
Views: 25