The US government is offering rewards of up to million for information on individuals associated with two Russian-linked cyber threat groups, UNC5792 and UNC4221, which target US officials, military leaders, journalists, and personnel in Ukraine. The Cybersecurity and Infrastructure Security Agency (CISA) and the FBI have reported that these groups conduct sophisticated phishing campaigns via commercial messaging applications (CMAs), using social engineering and masquerading as support accounts to gain unauthorized access. The attackers now request victims' Backup Recovery Keys, which can lead to future account takeovers even if new accounts are created. Both groups are linked to Russian intelligence services, with UNC5792 associated with the FSB Border Guards and UNC4221 with Russian military services. The US government seeks information on the identities, locations, affiliations, and funding sources of the actors behind these groups.