LONDON, Jan 26 (Reuters) - A Russia-based hacking group named Cold River is behind an expansive and ongoing information-gathering campaign that has struck various targets in government, politics, academia, defence, journalism, and activism, Britain said on Thursday.
"There is often some correspondence between attacker and target, sometimes over an extended period, as the attacker builds rapport," the advisory said.
A second, Iran-based, group known as Charming Kitten has deployed the same "spear-phishing" techniques to gather information, according to the NCSC.
Iran's mission to the United Nations in New York said the Iranian government had no knowledge of the group.
Since Russia's invasion of Ukraine, Cold River has escalated its hacking campaign against Kyiv's allies, cybersecurity researchers and western government officials told Reuters.