A Russia-sponsored threat actor is impersonating the U.S. Department of State, and using phishing to gain access to email accounts.

A cloud attack targeting Amazon SES and persistence via AWS Lambda, AWS IAM Identity Center and AWS IAM

By: Amy Robertson and Adam Pennington

Since early March 2025, Volexity has observed multiple suspected Russian threat actors conducting highly targeted social engineering operations aimed at gaining access to the Microsoft 365 (M365) acco...