FSB conducts cyber espionage campaign against embassies in Moscow, Microsoft says
FSB conducts cyber espionage campaign against embassies in Moscow, Microsoft says

Russia's Federal Security Service (FSB) is conducting a massive cyberespionage campaign targeting foreign embassies and diplomatic missions in Moscow, according to an investigation published Thursday by Microsoft. The US tech giant claims that this operation, orchestrated across Russian internet service providers, marks a significant escalation in the methods employed by Russian intelligence services.

According to Microsoft Threat Intelligence, this operation demonstrates for the first time the FSB's direct use of Russian network infrastructure to conduct cyber surveillance activities in Moscow. The group in question, dubbed "Midnight Blizzard" by Microsoft—also known as APT29 and generally associated with the FSB—is believed to have successfully compromised local internet connections in order to implant spyware in the computer systems of diplomatic targets.

Targets include foreign embassies and other diplomatic entities, including those of NATO and European Union member countries. This new method, which exploits access to Russian internet networks to intercept traffic and inject malware, represents a particularly sophisticated level of intrusion, according to cybersecurity experts.

Microsoft's revelation comes as diplomatic tensions between Russia and Western countries remain high, particularly amid the war in Ukraine, industrial espionage, and increasing pressure on foreign nationals in Russia. It could also further complicate bilateral relations, particularly with nations whose diplomatic infrastructure has been compromised.

The report does not specify which embassies were specifically targeted or the exact extent of the data compromised. However, Microsoft is calling on organizations operating in Russia to immediately review their security postures and consider alternative, more secure connection measures outside of locally controlled infrastructure.

The Russian government has not officially responded to Microsoft's allegations. However, Moscow has consistently denied any involvement in cyber espionage operations in the past, regularly dismissing such accusations as "baseless Western provocations."