Russian spies add OAuth abuse to phishing

Google tracks three suspected Russian cyber-spy groups targeting academia, aerospace, and government. They use OAuth phishing and malware, with campaigns ongoing since last year.