Russian Void Blizzard cyberspies linked to Dutch police breach

​A previously unknown Russian-backed cyberespionage group tracked as Void Blizzard has been linked to a September 2024 Dutch police security breach. As the Dutch national police (Politie) revealed last year, the attackers stole work-related contact information of multiple officers, including names, email addresses, phone numbers, and, in some cases, private details. The Netherlands General Intelligence and Security Service (AIVD) and the Netherlands Defence Intelligence and Security Service (MIVD) on Tuesday linked Void Blizzard to this breach in a joint advisory issued on Tuesday, warning that it is highly probable that these Russian hackers also breached other Dutch organizations. As the advisory explains, Void Blizzard accessed a Dutch police employee's account in September 2024 and stole work-related contact information through the Global Address List (GAL). The investigation revealed that the attackers likely used a pass-the-cookie attack, impersonating the cookie's owner usin ... Read full article.