Cisco Talos reported that multiple Talos researchers received messages linked to the same security-researcher targeting campaign described by Google TAG. One researcher was contacted on January 11 with the same lure seen in public reporting, and the attacker first asked whether the target was involved in vulnerability research before continuing the compromise attempt even after the target said they were not. Talos also observed possible contact attempts over LinkedIn and noted that the operator used credible English and timed messages to the researcher’s working hours. The source frames this as a nation-state campaign against high-value security personnel and advises researchers to isolate samples, projects, and third-party interactions.