Russian national charged in connection with Void Blizzard espionage campaign
Russian national Denis Obrezko charged in connection with Void Blizzard espionage campaign targeting US companies.
A Russian national, Denis Obrezko, has been charged by U.S. federal prosecutors in connection with the Void Blizzard cyber-espionage campaign. Obrezko is accused of facilitating attacks against at least 11 U.S. companies by purchasing virtual private servers and domain names used by the Kremlin-linked group. Void Blizzard, also known as Laundry Bear, has been observed using stolen session tokens and proxy services for large-scale espionage operations.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Microsoft?
Get an email when a new story names Microsoft, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe Void Blizzard campaign demonstrates how sophisticated threat actors exploit weak session management and inadequate monitoring to conduct large-scale espionage. The attackers used stolen session tokens to bypass traditional authentication controls, allowing them to maintain persistent access to victim networks. This highlights the critical importance of implementing robust session security controls and comprehensive monitoring systems that can detect anomalous authentication patterns and unauthorized access attempts.
What helps against this
How we list vendors
- Phishing-resistant MFA
A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.
- Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- domain — miscrsosoft[.]com
- domain — micsrosoftonline[.]com