Update on Pawn Storm: New Targets and Politically Motivated Campaigns - TrendLabs Security Intelligence Blog

Trend Micro documents ongoing Pawn Storm (an espionage APT) activity in H2 2017: persistent, targeted credential-phishing campaigns against political organizations, international sporting federations, and election-related targets across multiple countries. The actor uses social-engineering techniques (including tabnabbing), occasionally leverages zero-days or rapidly exploits patched vulnerabilities, and publishes a set of IoCs (phishing domains and webmail hosts) tied to the observed campaigns.