Tainted Leaks Disinformation and Phishing With a Russian Nexus

Tainted Leaks — Citizen Lab documents a coordinated Russia‑nexus phishing and disinformation campaign that used Tiny.cc/TinyURL redirects and crafted Google‑themed credential‑phishing pages to harvest email accounts (notably David Satter), then selectively modified and released stolen documents as "tainted leaks" via CyberBerkut to discredit critics and seed false narratives; the report provides enumeration of ~218 targets across 39 countries, technical linkage to phishing infrastructure (domains, IPs, URL parameter patterns), and circumstantial overlap with previously reported Russia‑linked operations.