APT28 (Swallowtail) breaches NATO naval shipbuilder, aircraft engine maker and law enforcement agency with HOOKEDGE backdoor and new ld.exe loader
Symantec reports that the Russia-linked APT28 (aka Swallowtail, Fancy Bear, Forest Blizzard, BlueDelta), which the U.S. government links to the GRU, targeted organizations in two NATO member states. Victims were a naval shipbuilder, a manufacturer of military aircraft engines and a law enforcement agency (thehackernews.com, cyberscoop.com…