CYBERSECURITYTRACKER
Permanent story citation

Defense contractors in two NATO allies hacked in recent Russia-linked campaign

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10716

As cited

Copy frozen at (site build).

threat intel

Defense contractors in two NATO allies hacked in recent Russia-linked campaign

Russian state-sponsored group APT28 (Fancy Bear) deployed a recently documented backdoor to establish persistent access in networks belonging to defense contractors and a law enforcement agency across two NATO member nations. Researchers attributed the intrusions to the threat actor's ongoing targeting of critical infrastructure and government entities.

Why it matters: Defense contractors and government agencies in NATO countries face direct compromise of sensitive systems; practitioners should review network logs for indicators of compromise from this backdoor and strengthen controls around critical defense systems.

Actorsapt28
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Defense contractors in two NATO allies hacked in recent Russia-linked campaign

Russian state-sponsored group APT28 (Fancy Bear) deployed a recently documented backdoor to establish persistent access in networks belonging to defense contractors and a law enforcement agency across two NATO member nations. Researchers attributed the intrusions to the threat actor's ongoing targeting of critical infrastructure and government entities.

Why it matters: Defense contractors and government agencies in NATO countries face direct compromise of sensitive systems; practitioners should review network logs for indicators of compromise from this backdoor and strengthen controls around critical defense systems.

Actorsapt28
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary