UK ties GRU to stealthy Microsoft 365 credential-stealing malware

UK ties GRU to stealthy Microsoft 365 credential-stealing malware Bill Toulas July 18, 2025 03:39 PM 0 The UK National Cyber Security Centre (NCSC) has formally attributed ‘Authentic Antics’ espionage malware attacks to APT28 (Fancy Bear), a threat actor already linked to Russia’s military intelligence service (GRU). The NCSC revealed in a detailed technical analysis of the Authentic Antics malware dated May 6th that it is stealing credentials and OAuth 2.0 tokens that allow access to a target's...