Three Russia-linked threat clusters are abusing legitimate authentication mechanisms to steal information from small groups of targeted individuals as recent as

Attackers Use Real Google and Microsoft Authentication Before Redirecting VictimsGoogle says three Russia-linked espionage clusters are abusing legitimate Google and Microsoft authentication flows to steal tokens and account access from defense, government, academic and think tank targets, exposing a visibility gap around personal accounts.