Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts

Back Feeds.Feedburner

Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts

Feeds.Feedburner •[email protected] (The Hacker News) • August 20, 2026

Share: View original

AI can find and chain vulnerabilities in minutes. This session gives you a practical roadmap to strengthen visibility, response, and remediation.

AI is helping teams ship code 10–50× faster. This session shows how to keep security from falling behind.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Russian Cyber Espionage Clusters Exploit OAuth and Phishing Techniques Google's Threat Intelligence Group (GTIG) is tracking three Russian cyber espionage clusters—UNC6293, UNC7005, and UNC5976—targeting individuals in academia, defense, and government across Europe and the U.S. These groups exploit legitimate authentication workflows, such as OAuth and app password phishing, to compromise accounts. UNC6293 impersonates U.S. State Department officials, while UNC7005 and UNC5976 employ various social engineering tactics, including fake invitations and device linking. The attacks are highly selective, often targeting fewer than 100 individuals at a time, but they pose significant risks due to their sophisticated methods. GTIG has observed these operations since at least 2025, with ongoing adaptations to their phishing techniques. The current status indicates a persistent threat as these clusters continue to evolve their tactics. 15 sources 76

Extracted Entities

Platforms (1)

Tools (1)