Ground.News Phishing Attack Targets CDU Email Account, Reaches Chancellor Merz
Article Content
- •CDU email account hacked, sending phishing emails to 6,500 contacts.
- •Chancellor Friedrich Merz among the recipients of the phishing attempt.
- •Police treating the incident as a significant phishing attack targeting security-related individuals.
On October 17, 2026, hackers compromised the email account of the Christian Democratic Union (CDU) in Heilbronn, Germany, sending phishing emails to approximately 6,500 contacts, including Chancellor Friedrich Merz. The emails contained a deceptive invitation link to an event featuring prominent guests, aimed at tricking recipients into revealing sensitive information. The Heilbronn police are treating this incident as a significant phishing attempt, particularly concerning due to the involvement of security-related contacts. Investigators are currently assessing the full scope and impact of the breach. No specific details about the attack vector or tools used have been disclosed.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track CDU in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Who was affected by the phishing emails?
What was the content of the phishing emails?
What actions are being taken in response to this incident?
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…