The attacks, which began in 2022, have also targeted individuals still in Russia, placing them at significant risk, as hackers seek to infiltrate extensive networks of contacts.