#apt28
#apt28
[ follow ]
#cybersecurity #russia #malware #phishing #gru #ukraine #nato #international-relations #france #credential-harvesting
France news
fromTechzine Global
6 days agoFrench Ministry of the Interior hacked, unclear if any data was stolen
The French Interior Ministry suffered a cyberattack compromising email servers and some document files; authorities launched an investigation and tightened security while origins are examined.
fromSecuritymagazine
3 months agoRussian Threat Group Targets Microsoft Outlook With Malware
"APT28 is abusing Outlook as a covert channel through a VBA macro backdoor named NotDoor," Jason Soroko, Senior Fellow at Sectigo, explains. "Delivery uses DLL sideloading of a malicious SSPICLI.dll by the signed OneDrive.exe to disable macro protections and stage commands. The macro watches inbound mail for a trigger word and can exfiltrate data upload files and run commands. This blends with trusted binaries and normal mail flow and can slip past perimeter tools and basic detections."
Information security
Information security
fromThe Hacker News
3 months agoRussian APT28 Deploys "NotDoor" Outlook Backdoor Against Companies in NATO Countries
APT28 deployed an Outlook VBA backdoor called NotDoor that monitors emails for a trigger to exfiltrate data, upload files, execute commands, and persist via DLL side-loading.
[ Load more ]