Russian State Hackers Trick Victims Into Creating Gmail “Backdoors” That Bypass Two-Factor Authentication

Russian hackers linked to APT29 are exploiting Google's app password feature through sophisticated social engineering attacks targeting academics and Russian critics. The campaign involves impersonating U.S. State Department officials over several weeks to build trust, then tricking victim...