Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader

The Russia-linked APT28 group has been attributed to espionage attacks on targets in two NATO member states, including a naval shipbuilder, The Hacker News reports. Symantec says the attackers used the HOOKEDGE backdoor, stole credentials two ways, set up a persistent SSH tunnel, and deployed a previously undocumented reflective loader.