APT28 used the Hookedge backdoor, SSH tunnels, and a new loader to spy on a naval shipbuilder and defense firms in two NATO countries. Related Posts: APT41 Deploys BlackX UEFI Bootkit Against Central Asian Diplomatic Agencies China-Linked Operator Used AI Agents to Breach 48 Government and Corporate Targets Across Asia Lazarus Operation FlashHole Abuses CrossWeb EX and GitHub to Spy on South Korean Firms The post APT28 Uses Hookedge Backdoor to Spy on Naval Shipbuilder and Defense Firms in Tw

Compromised hotel Wi-Fi gateways redirect business travelers to fake Microsoft 365 login pages allowing attackers to steal credentials and authorization tokens.