ForumTroll APT Targets Russian Political Scientists with Sophisticated Cyberattacks

The ForumTroll APT group has launched targeted email campaigns against political scientists in Russia, focusing on individuals in political science, international relations, and global economics. This operation exploits the CVE-2025-2783 vulnerability in Google Chrome and utilizes malicious implants like the LeetAgent backdoor and Dante spyware. The attacks have persisted beyond their initial discovery in March 2025, continuing to affect specific individuals within the Russian Federation.