DOJ & Microsoft Team Up To Crack Down On Russian Cyber Fraud

In recent news, Microsoft and the U.S. Department of Justice (DOJ) made headlines with their bold seizure of 107 Russian-controlled domains used for cyber fraud. These domains were tied to state-sponsored threat actors from Russia’s Federal Security Service (FSB), particularly a group that has been operational since 2012. This cyber crackdown highlights a critical point we often discuss on the podcast: people are the weakest link in the cybersecurity chain.

The seized domains were reportedly being used for phishing, credential harvesting, and other cybercrimes. What’s striking here isn’t just the breadth of these operations but the simplicity of the attacks. "The attacks aren’t getting more sophisticated, it’s that people are just being more vulnerable," as I mentioned during the episode. Threat actors are leveraging human error more than ever—whether through email phishing or SMS-based smishing attacks.

Phishing remains one of the top vectors for cyberattacks. It's not the Hollywood-style hacks we see on screen; it’s far more common to trick people into handing over sensitive information. In this case, it targeted over 82 people, including those from NGOs and other high-profile entities. The ease of exploiting these vulnerabilities showcases the ongoing necessity for strong cybersecurity hygiene.

One of the core lessons is the importance of multi-factor authentication (MFA) and unique, strong passwords. The days of using the same password across multiple accounts are long gone. We've seen breaches happen daily, and if you're reusing passwords, you're handing threat actors the keys to the kingdom.

Even as we look toward a passwordless future, MFA has become the first line of defense. "I’m starting to turn the corner on two-factor authentication," I admitted on the show. MFA offers that extra layer of security when users forget their passwords—a growing issue as we try to create more complex and unique ones for every site.

What does this all mean for the future? The reality is, that as long as people continue to click links they shouldn’t or trust messages that seem legitimate but aren’t, threat actors will have a field day. But hope is not lost. Collaboration between private tech giants like Microsoft and governmental entities can make a real dent in cybercrime. But it's up to us, as individuals and businesses, to ensure we're not the weakest link.

In the end, cybersecurity isn’t just about defense mechanisms—it's about vigilance, education, and a mindset of constant improvement. After all, it’s better to be safe and over-prepared than caught off guard.

Thank you for reading and stay tuned for more episodes of The Other Side of the Firewall podcast on Monday, Tuesday, Wednesday, and Fridays, as well as, the Ask A CISSP podcast every Thursday. Make sure to also add The Cybe Coffee Hour to your podcast rotation! Please like, share, and, subscribe.

Stay safe, stay secure!

Ryan is a retired Air Force veteran who brings over 20 years of experience in network infrastructure, project management, and cybersecurity consulting to his current roles at RAM Cyber Consulting & Assessments, LLC and BuddoBot . Buddobot’s mission is to support national security by transforming, empowering, and educating organizations to shift from reactive, diluted, automated, and high-cost IT and security practices to proactive, effective solutions that fortify their security.

Shannon, also a retired Air Force veteran, has more than two decades of expertise in network security and vulnerability management. He now serves as an Information System Security Officer (ISSO) for the U.S. Space Force, where he continues to enhance national security protocols.

Chris, a Navy veteran with over ten years in IT, information assurance, and risk management, currently works at CompliancePoint . His roles include vCISO, RMF assessor, and consultant, focusing on enhancing data security and privacy for various organizations.

Daniel is an Air Force veteran with over 15 years of combined experience in IT, cybersecurity, information assurance, and government risk compliance. He has held various roles, including IT administrator, cybersecurity engineer, senior information system security manager, and currently serves as a senior security consultant for Booz Allen Hamilton. In this latest role, Daniel leverages his expertise to address unique and complex challenges in the cyber and IT domains, enhancing his customers’ capabilities.

**The Other Side of the Firewall podcast is a product of RAM Cyber Consulting & Assessments, LLC . RAM Cyber is a premier Governance, Risk, and Compliance (GRC) consultancy dedicated to supporting the Defense Industrial Base (DIB), Federal agencies, and corporate entities. We specialize in delivering expert guidance to ensure compliance, mitigate risks, and enhance cybersecurity postures. RAM Cyber is pending SDVOSB, VOSB, and 8(a) certification by the SBA, underscoring our commitment to excellence and service.