APT42 launched "SpearSpecter," a campaign targeting defense officials and their relatives. It uses personalized social engineering and the stealthy, PowerShell-based TAMECAT malware.

Attackers are exploiting LinkedIn as a phishing channel, bypassing email filters with messages from stolen accounts to target executives and access corporate cloud services.