The same infrastructure traced back to Russian-speaking threat group Nobelium is being used to set up misspelled domain names, presaging impersonation attacks bent on credential harvesting, analysts say.

from Dark Reading https://ift.tt/JEjVoDq
via IFTTT