TAG Bulletin: Q3 2024
This bulletin includes coordinated influence operation campaigns terminated on our platforms in Q3 2024. It was last updated on September 12, 2024.JulyWe terminated 89 Y…
State-backed attackers and commercial surveillance vendors repeatedly use the same exploits
We’re sharing an update on suspected state-backed attacker APT29 and the use of exploits identical to those used by Intellexa and NSO.
Iranian backed group steps up phishing campaigns against Israel, U.S.
Google’s Threat Analysis Group shares insights on APT42, an Iranian government-backed threat actor.
Google disrupted over 10,000 instances of DRAGONBRIDGE activity in Q1 2024
Today we are sharing updated insights about DRAGONBRIDGE, the most prolific IO actor Google’s Threat Analysis Group (TAG) tracks.
TAG Bulletin: Q2 2024
Our bulletin covering coordinated influence operation campaigns terminated on our platforms in Q2 2024.
TAG Bulletin: Q1 2024
This bulletin includes coordinated influence operation campaigns terminated on our platforms in Q1 2024. It was last updated on March 6, 2024.JanuaryWe blocked 4 domains…
Buying Spying: How the commercial surveillance industry works and what can be done about it
The latest report from Threat Analysis Group documents the rise of commercial surveillance vendors and the industry that threatens free speech, the free press and the op…
Russian threat group COLDRIVER expands its targeting of Western officials to include the use of malware
Threat Analysis Group sheds light on Russian threat COLDRIVER’s use of malware.
TAG Bulletin: Q4 2023
This bulletin includes coordinated influence operation campaigns terminated on our platforms in Q4 2023. It was last updated on December 15, 2023.OctoberWe terminated 8 …
Zimbra 0-day used to target international government organizations
TAG’s discovery of a 0-day exploit used to steal email data from international government organizations.