Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader

AI Summary

Symantec's Threat Hunter Team attributed a recent espionage campaign to APT28 (aka Fancy Bear, Forest Blizzard), targeting a NATO naval shipbuilder, an aircraft engine manufacturer, and a law enforcement agency across two NATO member states. The attackers deployed a previously undocumented backdoor called HOOKEDGE alongside a new reflective loader. This campaign reinforces APT28's continued focus on Western defense-industrial targets ahead of geopolitical tensions.

Read full article → https://thehackernews.com/2026/10/russian-apt28-br…

Relevance score: 89.0/100

# More from October 21

1
PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert The Hacker News
3
Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software The Hacker News
4
Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA The Hacker News
5
Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution The Hacker News
6
AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign SecurityWeek
7
Police arrest Qilin ransomware suspect on holiday, as links made to Synnovis hack that contributed to patient’s death Graham Cluley
8
Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware The Hacker News
9
Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election The Hacker News
10
ConnectWise customers hit by supply-chain attack linked to compromised API secret CyberScoop