Symantec Threat Hunter Team / security.com, publié le 27 octobre 2026. L'article documente une campagne d'espionnage attribuée au groupe russe APT28 (alias Swallowtail, Fancy Bear, Forest Blizzard), unité du renseignement militaire russe (GRU), ciblant des organisations dans deux États membres de l'OTAN.

Symantec Threat Hunter Team / security.com, publié le 27 octobre 2026. L'article documente une campagne d'espionnage attribuée au groupe russe APT28 (alias Swallowtail, Fancy Bear, Forest Blizzard), unité du renseignement militaire russe (GRU), ciblant des organisations dans deux États membres de l'OTAN.

Russian military hacking group APT28 breached two NATO defense contractors and a law enforcement agency in a targeted cyber espionage campaign, Symantec reports.

In today’s video, we review the Automated Kill Chain and new AI-orchestrated cyber campaigns. 00:08 What is APT? 00:32 Landscape of Advanced Persistent Threats 01:29 APT28, APT29, Sandworm, Lazarus Group 02:38 APT campaigns by target sector and attack vectors 03:04 AI-orchestrated cyber campaigns 03:38 Cisco LLM Security leaderboard https://cs.co/63321BHbx0U 04:04 Token consumption across an LLM-orchestrated attack pipeline 04:44 MCP servers for Cisco security solutions https://cs.co/63323BHbx0S Subscribe to the Cisco DevNet YouTube channel and keep up with our latest videos and streams → https://cs.co/63326BHbx0Q

Takeaways Up Front

20 curated cybersecurity & geopolitical intel stories. Nation-state ops, threat intel, policy & vulnerabilities.

The Russian group known as APT28 and Fancy Bear used a recently documented backdoor to dwell in the networks of two defense contractors and a law enforcement agency in two NATO allies, researchers sai...

Rapport publié le 21 octobre 2026 par Cryptika (source originale : CyberSecurityNews.com), basé sur une analyse de la Threat Hunter Team de Symantec. L'article documente une campagne d'espionnage cyber attribuée à APT28 (alias Fancy Bear, Forest Blizzard, Swallowtail selon Symantec) ciblant des organisations de défense dans deux pays membres de l'OTAN non nommés.

At a glance Actor Swallowtail (APT28, Fancy Bear, Forest Blizzard), linked by the US government to Russia's GRU Activity Cyber espionage using the Hookedge backdoor, credential theft, and SSH tunneling Targets A law enforcement agency, a naval shipbuilder, and a military aircraft engine maker Scale Organizations in two NATO member states; one intrusion lasted at least two months Status

Le groupe APT28 (également connu sous les noms Swallowtail, Fancy Bear et Forest Blizzard), affilié au renseignement militaire russe (GRU), a compromis trois organisations situées dans des pays membres de l'OTAN : Un chantier naval militaire (naval shipbuilder) Un fabricant de moteurs d'avions militaires Une agence de forces de l'ordre Les cibles ont été choisies délibérément.

Noteworthy stories that might have slipped under the radar: Russia’s APT28 hit NATO defense firms, PingCAP source code stolen, ShinyHunters negotiator probe. The post In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware appeared…

Symantec says Russia's APT28 hackers spent two months inside NATO defense firms, using the Hookedge backdoor and an undocumented loader to steal credentials.

APT28 targeted two NATO states with HOOKEDGE and a new reflective loader, stealing credentials and establishing an SSH tunnel at a naval shipbuilder.

Eleven nations warn Russia's GRU unit APT28 is hunting NATO defense and logistics targets with the HookEdge backdoor. Watch for traffic to webhook.site.