Russian APT29 Exploits Gmail App Passwords to Bypass 2FA in Targeted Phishing Campaign

Threat actors with suspected Russian ties are exploiting Google’s application specific passwords feature in a social engineering campaign to access victims’ emails, according to the Google Threat Intelligence Group and Citizen Lab. This targeted activity highlights the evolving tactics used in cyber threats against individuals and organizations.

Need More Context? 🔎