Nation-state campaign targets Talos researchers
Summary: Google's Threat Analysis Group published a blog Monday evening warning of an ongoing campaign attempting to compromise security researchers, and Cisco Talos confirmed that multiple of its researchers received messages that appear linked to the campaign. One Talos researcher was contacted on Jan. 11 with the same lure Google shared, and the attacker first asked whether the target did vulnerability research, then continued the attempt even after the researcher said they did not.
Why it matters: The attacker wrote in fluent English and made contact within the researcher's normal working hours for their time zone, so the lure was tailored enough that a generic phishing filter or an off-hours warning would not have caught it.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Mentions
- CVE-2026-20127
- Related
- Talos on the developing situation in Ukraine Cyber Risks ·Ghidra data type archive for Windows driver functions Cyber Risks ·Inside Key Drift: Analyzing historical UAT-11473 activity on Cisco SD-WAN Cyber Risks · Oct 28, 2026