Suspected Russian phishing campaign sets sights on NATO countries

NATO-aligned countries' foreign affairs ministries have been targeted by a new phishing campaign deploying a Duke malware variant, which has been linked to Russian state-backed cyberespionage operation APT29, also known as Cozy Bear, BlueBravo, Cloaked Ursa, The Dukes, Midnight Blizzard, and Iron Hemlock, The Hacker News reports.

apt29 bear blizzard bluebravo campaign cloaked cloaked ursa countries cozy bear cyberespionage duke hacker iron malware midnight midnight blizzard nato phishing phishing campaign reports russian state threat intelligence