The Russia-linked state-sponsored threat actor tracked as APT28 (aka BlueDelta, Fancy Bear, and Forest Blizzard) has been attributed to attacks targeting two member states of the North Atlantic Treaty Organization (NATO). https://thehackernews.com/2026/10/russian-apt28-breaches-nato-naval.html
The Hacker NewsRussian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective LoaderAPT28 targeted two NATO states with HOOKEDGE and a new reflective loader, stealing credentials and establishing an SSH tunnel at a naval shipbuilder.