Albion Online Players Targeted in EFF Impersonation Phishing Campaign

A threat actor impersonated the Electronic Frontier Foundation (EFF) to target Albion Online players using decoy documents and malware. An exposed directory contained malware (Steal and Pyramid C2) alongside fake EFF reports. Analysis linked the operation to a Russian-speaking developer and 11 servers sharing SSH keys. Phishing messages claimed EFF was investigating account theft, luring players to malicious links. The incident highlights the danger of threat actors leveraging the trust associated with well-known organizations.