Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader
The Russia-linked state-sponsored threat actor APT28, also tracked as BlueDelta, Fancy Bear and Forest Blizzard, has been attributed to attacks targeting two NATO member states, The Hacker News reports. The Symantec Threat Hunter Team is tracking the activity, which includes a breach of a NATO naval shipbuilder and a new reflective loader. https://thehackernews.com/2026/10/russian-apt28-breaches-nato-naval.html
The Hacker NewsRussian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective LoaderAPT28 targeted two NATO states with HOOKEDGE and a new reflective loader, stealing credentials and establishing an SSH tunnel at a naval shipbuilder.