When Getting Phished Puts You in Mortal Danger
Summary: Researchers at Silent Push mapped several dozen phishing domains that spoof the recruitment sites of Ukrainian paramilitary groups and Ukrainian government intelligence sites, including a fake Freedom of Russia Legion page using a Google Form to collect applicants' names, ages, citizenship, military experience, political views and motivations. The sites appear to be promoted through manipulated search results rather than email, and researcher Artem Tamoian found the phishing page ranked first on Yandex for 'Freedom of Russia legion' while Google returned the legitimate site; two sites he reported to Cloudflare were exposed as hosted on the bulletproof hosting network Stark Industries Solutions.
Why it matters: Russia's Supreme Court designated the Freedom of Russia Legion a terrorist organization in March 2023, meaning Russians caught communicating with the group face 10 to 20 years in prison - and Tamoian says the phishing sites keep appearing atop DuckDuckGo and Yandex, so they work.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026