The group, dubbed SiribClone by Russian cybersecurity firm F6, has been active since at least the summer of 2025 and has primarily targeted members of the Russian armed forces stationed in border regions and combat zones.
First seen on therecord.media
Jump to article: therecord.media/hackers-pose-as-women-seeking-romance-russian-military
