Threat actors with suspected Russian ties are exploiting Google’s application specific passwords feature in a social engineering campaign to access victims’ emails, according to the Google Threat Intelligence Group and Citizen Lab. This targeted activity highlights the evolving tactics used in cyber threats against individuals and organizations.