Symantec researchers reported that Russian government-linked hackers compromised two defense companies and a law enforcement agency in NATO countries. The group, known as Swallowtail or APT28, targeted a naval shipbuilder, an aircraft engine manufacturer, and a police agency. Analysts observed hands-on-keyboard activity where human operators manually stole credentials from the shipbuilder over a week. The attackers used the Hookedge backdoor and a new loader named ld.exe to move sensitive operations to a dedicated server. This campaign appears to be part of broader intelligence collection against European defense and government targets.
Read the full story at cyberscoop.com.
Photo: markusspiske / Pixabay
