Russian APT28 Targets NATO Naval Shipbuilder with New Reflective Loader

Russian state-sponsored group APT28 breached a NATO naval shipbuilder, deploying a new backdoor called HOOKEDGE and a previously unknown reflective loader. The attack was attributed to the Swallowtail threat cluster by Symantec's Threat Hunter Team.

The Russia-linked state-sponsored threat actor tracked as APT28 (aka BlueDelta, Fancy Bear, and Forest Blizzard) has been attributed to attacks targeting two member states of the North Atlantic Treaty Organization (NATO).

The Symantec Threat Hunter Team, which is tracking the activity cluster under the moniker Swallowtail, involved the use of a backdoor called HOOKEDGE and a previously

Read original article