An ongoing cyber-espionage campaign by Russia's Midnight Blizzard threat group may be much larger in scope than generally assumed, targeting international entities in government, armed forces, and academic institutions, Trend Micro said in recently released research. At its peak in October 2024, researchers observed Midnight Blizzard which they track as Earth Koshchei hitting as many as 200 entities a day with phishing emails containing a malicious Remote Desktop Protocol (RDP) file and red tea