A Russia-linked hacking group is shifting its online infrastructure likely in response to public disclosures about its activity.
Recorded Future’s Insikt Group traced over the last five months the revamped infrastructure of a group it tracks as “BlueCharlie,” which overlaps with activity attributed to the threat actor variously known as Seaborgium, Callisto/Calisto and Coldriver. A recent assessment of the group by the British cybersecurity agency stopped short of connecting the threat actor with the Kremlin but said that its targets have included ” academia, defence, governmental organisations, NGOs, think-tanks, as well as politicians, journalists and activists” (see: Russian Hackers Suspected of Accessing Email of British MP).
