Timo Steffens tweeted:
New spearphishing technique: Targeted mail contains no links or exploits, but mentions report title. Googling title leads to exploit site.
Good news for wannabe government/industry leakers.
This spearphishing technique avoids question about your cybersecurity competence in evaluating links in a phishing email.
You did a search relevant to your position/task and Google delivered an exploit site.
Hard to fault you for that!
The success of phishing for leaks depends on non-leak/spoon-fed journalists.