Russia-linked APT28 breaches defense contractors in two NATO countries

First reported by The Record at · Updated · 3 sources

Researchers linked the campaign to a backdoor used inside two defense contractors and a law enforcement agency, according to The Record. The Hacker News identifies the backdoor as HOOKEDGE. Symantec says the attackers are the same group responsible for attacks on Democrats during the 2016 presidential election, CyberScoop reports.

  • APT28 is also known as Fancy Bear.

Covered by 3 publishers within 8 hours of the first report.

Reporting3

The Record Defense contractors in two NATO allies hacked in recent Russia-linked campaign
The Hacker News Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader · info@thehackernews.com (The Hacker News)
CyberScoop Russian GRU hackers hit NATO shipbuilder, aircraft engine maker, law enforcement agency in espionage campaign · Tim Starks