TAG-110, a Russia-aligned threat actor, has been observed in the wild using a spear-phishing campaign against Tajikistan. The campaign uses macro-enabled Word templates as an initial payload, a change from the malicious actor’s previously documented attack style. Researchers believe that the actor is likely targeting Tajikistan government, educational, and research institutions for cyber espionage purposes, aiming to gather intelligence. TAG-110 is known for targeting European embassies in addition to other Asian and European organizations. 

Read more: https://thehackernews.com/2025/05/russia-linked-hackers-target-tajikistan.html