Microsoft Details BadPilot Campaign by Seashell Blizzard
/ 1 min read
🌐 Microsoft reveals details on the BadPilot campaign linked to Russian threat actor Seashell Blizzard. The BadPilot campaign, a subgroup of the Russian state actor Seashell Blizzard, has been conducting a multiyear operation targeting global internet-facing infrastructure to maintain access to high-value networks. Active since at least 2021, this subgroup has expanded its operations beyond Eastern Europe, compromising sectors such as energy, telecommunications, and government. Recent tactics include exploiting vulnerabilities in remote management software and deploying web shells for persistence. Microsoft Threat Intelligence warns that these activities pose significant risks to organizations worldwide, particularly as the subgroup adapts its methods to align with Russia’s strategic objectives amid ongoing geopolitical tensions.
