INTERNACIONAL
Un grupo de ciberespionaje apoyado por Rusia logró acceso a redes de países de la OTAN y empresas de tecnología occidentales

El grupo de ciberespionaje apodado Laundry Bear ha perfeccionado técnicas de ataque como el uso de dominios falsificados y campañas de spear-phishing para infiltrarse en organizaciones clave de Europa y Norteamérica, según reportó The Register. Esta agrupación, también identificada por Microsoft como Void Blizzard, ha intensificado sus operaciones desde abril de 2024, enfocándose en entidades gubernamentales, fuerzas policiales, empresas tecnológicas occidentales y sectores estratégicos de interés para el gobierno ruso. Las agencias de inteligencia de los Países Bajos, la AIVD y la MIVD, confirmaron que el grupo actúa con respaldo estatal ruso y representa una amenaza internacional significativa.
De acuerdo con The Register, la primera detección de Laundry Bear ocurrió durante una investigación sobre un ataque de robo de credenciales dirigido a la policía neerlandesa en septiembre de 2024. Las autoridades neerlandesas detallaron que, ese mismo año, los ciberespías rusos lograron infiltrarse en empresas de defensa, aeroespacial y tecnología espacial, así como en compañías que desarrollan tecnologías avanzadas restringidas para Rusia debido a las sanciones impuestas por países occidentales tras la invasión a Ucrania.
Por su parte, Microsoft Threat Intelligence informó que en octubre de 2024, el grupo accedió a cuentas de usuarios de organizaciones ucranianas del sector aeronáutico. Esta entidad ya había sido blanco de ataques previos por parte de Seashell Blizzard (también conocido como Sandworm), otro grupo vinculado a la inteligencia rusa, en 2022. Según el informe de Microsoft, Laundry Bear ha intentado comprometer de manera regular a organismos gubernamentales y fuerzas del orden en Europa y América del Norte, además de atacar sectores como telecomunicaciones, defensa, salud, educación, tecnología de la información, transporte, medios de comunicación y organizaciones no gubernamentales.
La agencia de noticias Reuters consignó que los ataques contra instituciones neerlandesas forman parte de una amenaza cibernética internacional más amplia. En una carta conjunta al parlamento, la AIVD y la MIVD subrayaron que el grupo operó de manera encubierta hasta su descubrimiento en septiembre de 2024, cuando accedió a información confidencial de funcionarios policiales de los Países Bajos. El objetivo principal de estos ataques ha sido obtener información sobre la adquisición y producción de equipamiento militar por parte de gobiernos occidentales y sobre los envíos de armas a Ucrania.
The Register detalló que, hasta la fecha, Laundry Bear solo ha ejecutado ataques cibernéticos no destructivos, orientados principalmente al espionaje. El grupo suele emplear credenciales robadas obtenidas en ecosistemas de malware de robo de información y, una vez dentro de las organizaciones víctimas, recopila grandes volúmenes de correos electrónicos y archivos. En abril de 2025, Microsoft Threat Intelligence Center observó que Void Blizzard amplió su repertorio con campañas de spear-phishing dirigidas al robo de credenciales, enfocándose en más de 20 organizaciones no gubernamentales en Europa y Estados Unidos.

Durante estas campañas, los atacantes se hicieron pasar por organizadores de la European Defense and Security Summit, enviando correos electrónicos con archivos PDF maliciosos que contenían un código QR. Al escanearlo, las víctimas eran redirigidas a una infraestructura controlada por Void Blizzard en el dominio falsificado micsrosoftonline.com, que simulaba la página de inicio de sesión de Microsoft. El montaje utilizaba la herramienta de código abierto Evilginx para interceptar nombres de usuario, contraseñas y cookies de sesión cuando los usuarios intentaban “registrarse” en el falso evento.
El uso de dominios falsificados, conocido como typosquatting, representa una táctica novedosa para el grupo, lo que indica una evolución hacia operaciones más dirigidas y un aumento del riesgo para sectores críticos, según advirtió Microsoft. Una vez obtenida la entrada inicial, los atacantes explotan interfaces legítimas de la nube, como Exchange Online y Microsoft Graph, para acceder a buzones de correo, incluidos los compartidos, y archivos alojados en la nube, automatizando la recolección masiva de datos.

Microsoft también observó que, en algunos casos, los atacantes accedieron a conversaciones y mensajes de Microsoft Teams a través de la aplicación web, y utilizaron la herramienta pública AzureHound para mapear la configuración de Microsoft Entra ID de las organizaciones comprometidas, obteniendo información sobre usuarios, roles, grupos, aplicaciones y dispositivos.
Aunque muchas de estas tácticas son comunes entre los grupos de espionaje y ofensiva cibernética del gobierno ruso, tanto Microsoft como los servicios de inteligencia neerlandeses sostienen que Laundry Bear constituye una agrupación distinta. Según el aviso conjunto de la AIVD y la MIVD, las operaciones de Laundry Bear presentan similitudes con el modus operandi de APT28 (también conocido como Fancy Bear), otro grupo vinculado al GRU ruso, que desde 2022 ha atacado a proveedores logísticos, empresas tecnológicas y organismos gubernamentales de países occidentales y de la OTAN que brindan asistencia a Ucrania.
En las últimas semanas, 21 agencias gubernamentales de países como Estados Unidos, Reino Unido, Canadá, Alemania, Francia, República Checa, Polonia, Austria, Dinamarca y Países Bajos alertaron sobre una campaña en curso de Fancy Bear dirigida a servidores de correo electrónico y cámaras conectadas a internet en pasos fronterizos ucranianos, con el objetivo de rastrear envíos de ayuda.

A pesar de la coincidencia en la selección de objetivos y el uso de técnicas como los ataques de password spraying, los servicios neerlandeses enfatizaron que Laundry Bear y APT28 son actores diferentes. The Moscow Times también reportó que la investigación de las agencias neerlandesas reveló que Laundry Bear ha estado detrás de operaciones cibernéticas contra gobiernos occidentales y otras instituciones desde al menos 2024.
El análisis de las agencias de inteligencia neerlandesas, citado por Reuters y The Moscow Times, concluyó que los ciberataques contra instituciones de los Países Bajos forman parte de una amenaza internacional más amplia, con el objetivo de obtener información estratégica sobre la producción y suministro de equipamiento militar occidental y la entrega de armas a Ucrania.
INTERNACIONAL
Rusia corrió a cargar buques petroleros para aprovechar el alza del crudo y la pausa en las sanciones de Trump

INTERNACIONAL
Afghanistan accuses Pakistan of killing hundreds in Kabul hospital strike

NEWYou can now listen to Fox News articles!
A reported airstrike on a hospital in Afghanistan that allegedly left hundreds dead is drawing growing scrutiny, not only over the strike itself but over what critics describe as a muted international response.
Afghanistan’s Taliban-led government said more than 400 people were killed and hundreds were wounded after a strike hit the Omid Hospital, a major drug rehabilitation facility in Kabul, Afghanistan, according to Reuters. Civilians, including children, also have been killed in escalating cross-border strikes in Pakistan, The Associated Press reported.
The casualty figures have not been independently verified.
The strike comes amid a rapidly escalating military campaign between Pakistan and Afghanistan that has intensified over the past three weeks.
INDIA STEPS UP DIPLOMATIC RELATIONS WITH THE TALIBAN AS RIVAL PAKISTAN LOSES INFLUENCE IN AFGHANISTAN
The site of a drug rehabilitation hospital that was destroyed in what the Taliban said was a Pakistani air strike in Kabul, Afghanistan, March 17, 2026. (Sayed Hassib/Reuters)
Cross-border airstrikes and clashes have expanded across multiple provinces, with Pakistan targeting what it says are bases of the Tehrik-e-Taliban Pakistan (TTP), a militant group responsible for attacks inside Pakistan and designated as a terrorist organization by the U.S. The Taliban government has accused Islamabad of violating Afghanistan’s sovereignty.
At a United Nations briefing Wednesday, a U.N. spokesperson said the conflict has now entered its third week, with widespread civilian impact. More than 115,000 people have been displaced, more than 300 shelters damaged or destroyed, and at least 25 health facilities closed or disrupted due to the fighting, according to U.N. humanitarian agencies.
Pakistan has denied targeting a hospital, saying the operation struck militant infrastructure.
«Since the beginning of this counterterrorism campaign, Pakistan has sought to defend and protect the people of Pakistan … by targeting terrorists and terrorist infrastructure that are incubated and nurtured by the Afghan Taliban,» the prime minister’s spokesperson Mosharraf Zaidi told Fox News Digital.
PAKISTAN DECLARES ‘OPEN WAR’ ON AFGHANISTAN IN RESPONSE TO TALIBAN’S RETALIATORY STRIKES

Red Crescent volunteers carry the body of a victim who died in what the Taliban said was a Pakistani air strike on a drug rehabilitation hospital, in Kabul, Afghanistan, March 17, 2026. (Sayed Hassib/Reuters)
Zaidi said the strike targeted weapons and ammunition at Camp Phoenix in Kabulm Afghanistan, and insisted, «There are no civilian hospitals in Camp Phoenix,» adding that reports of a rehabilitation facility being hit may be due to «secondary explosions» from stored weapons.
The United Nations on Wednesday, two days after the attack, condemned the reported strike, with Secretary-General António Guterres, through a spokesperson, «strongly condemning» an airstrike that «reportedly resulted in the death (and) injury of civilians at a hospital,» and calling for an independent investigation.
Still, some analysts say the response does not match the scale of the incident.
«U.N. officials swiftly condemned U.S. and Israeli strikes on Iran’s regime as unlawful ‘aggression’ … Yet Pakistan’s airstrike on Kabul’s Omid Hospital — killing over 400 civilians — has drawn only a belated ‘strong condemnation’ … and standard pleas for ‘de-escalation’,» Executive Director of UN Watch Hillel Neuer told Fox News Digital.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Afghan Taliban fighters patrol near the Afghanistan-Pakistan border in Spin Boldak, Kandahar Province, following exchanges of fire between Pakistani and Afghan forces. (Reuters/Stringer/File Photo)
«This restrained response — no personal outrage from Guterres, no emergency session naming Pakistan, and no equivalent chorus from U.N. rapporteurs, or agencies like WHO, U.N. Women, and UNICEF — reveals rank hypocrisy,» he said. «When hundreds of vulnerable Afghans die in a hospital, the U.N. offers measured words. Yet when the U.S. or Israel can be blamed — justifiably or not — the condemnation is immediate and overwhelming. When some victims matter far more than others, the U.N. reveals its cynical political agenda. This double standard doesn’t uphold human rights, it erodes them.»
Australian human rights lawyer Arsen Ostrovsky echoed that criticism in a post on X, calling the strike «an absolute massacre,» while noting what he described as a lack of global outrage: «World outrage? Zero. Could barely muster p17 in the newspaper here.»
afghanistan,pakistan,united nations,bombings,terrorism
INTERNACIONAL
Trump continues to push for release of Tina Peters as Colorado governor weighs clemency

NEWYou can now listen to Fox News articles!
President Donald Trump on Wednesday renewed his calls to release Tina Peters, a pro-Trump election worker who was convicted for her role in a scheme aimed at finding evidence of election fraud in the president’s 2020 election loss.
Peters, a former election clerk in Mesa County, Colorado, is serving a nine-year prison sentence following her August 2024 conviction on seven charges, including four felonies, related to a 2021 security breach of the county’s voting systems as she sought evidence to support Trump’s claims that his loss to former President Joe Biden was due to voter fraud.
Trump has been pressuring Democrat Gov. Jared Polis to release Peters, 70, since he returned to the White House last year.
«Free Tina Peters, a 73-year-old woman with cancer, given a nine-year death sentence in a Colorado prison by a Democrat governor, Jared Polis, and a corrupt political machine, for exposing fraud by the Democrats during the 2020 presidential election,» Trump wrote Wednesday on Truth Social. «Again, free Tina!»
COLORADO GOVERNOR LAYS OUT CONDITION FOR GRANTING CLEMENCY TO PRO-TRUMP CLERK UNDER PRESSURE FROM PRESIDENT
President Donald Trump continued his calls to release Tina Peters. (Photo by Marc Piscotty/Getty Images)
Polis has acknowledged that Peters’ sentence was «harsh,» given that she had no prior criminal record.
The governor recently noted on social media that Peters was sentenced to nine years in prison, while a former state lawmaker convicted of the same crime was sentenced only to probation and community service.
«Justice in Colorado and America needs to be applied evenly, you never know when you might need to depend on the rule of law. This is the context I am using as I consider cases like this that have sentencing disparities,» Polis wrote on X.
But Polis said his decision about granting clemency would be influenced by whether Peters has expressed remorse for her actions — something officials say she has not done.
«What she would have to show in any successful clemency application would be appropriate contrition, apology. That’s the kind of thing I would be looking for,» he previously told KUSA-TV.
TRUMP ANNOUNCES PARDON FOR COLORADO CLERK: ‘SIMPLY WANTED TO MAKE SURE THAT OUR ELECTIONS WERE FAIR’

President Donald Trump has been pressuring Gov. Jared Polis to release Peters since he returned to the White House last year. (Hyoung Chang/MediaNews Group/The Denver Post via Getty Images)
Colorado Attorney General Phil Weiser, whose office helped prosecute Peters, has emphasized that she has not demonstrated any remorse for her actions.
«Clemency should be based on remorse, rehabilitation, and extenuating circumstances — not on political influence, favor, or retribution,» said Weiser, a Democrat running to succeed the term-limited Polis.
U.S. Sen. Michael Bennet, D-Colo., who is also hoping to replace Polis as governor, similarly said Peters should not receive a pardon or have her sentence commuted.
«Donald Trump may be seeking revenge on Colorado, but surrendering to his political pressure will not make our state stronger or safer,» he said.
Trump has repeatedly defended Peters on social media and announced last year he was granting her a «full pardon,» though such a move would not apply to a state conviction, as that authority rests with the governor.
Earlier this week, a federal judge found that the Trump administration had threatened to withhold funding from Colorado, describing it as potential retribution for the state’s reluctance to pardon Peters. The finding came shortly after Trump’s symbolic pardon announcement.

President Donald Trump has repeatedly defended Tina Peters on social media. (Jacquelyn Martin/AP Photo)
U.S. District Court Judge R. Brooke Jackson wrote that the U.S. Department of Agriculture’s threat in December to withhold millions of dollars in federal funding to Colorado’s SNAP program violated the Spending Clause of the U.S. Constitution.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
«This larger context gives the game away; the pilot project seems to be about punishment and nothing more,» the judge wrote.
A lawsuit also claimed this week that the Trump administration targeted a climate and weather research lab as retribution against Colorado officials for imprisoning Peters.
Fox News’ Anders Hagstrom contributed to this report.
donald trump,2020 presidential election,elections,voter fraud concerns,politics,colorado,us
POLITICA2 días agoTRAICIÓN Y ÉXODO: La promesa rota de Monteoliva que desató una ola masiva de bajas en la Policía Federal
POLITICA2 días agoAdorni se disculpó por el viaje de su esposa: “Fue una pésima decisión, más allá de que no generó gasto para el Estado”
POLITICA2 días agoHoracio Rodríguez Larreta reapareció y lanzó “Metrópolis”, su nuevo espacio en la Ciudad de Buenos Aires












