#NotDoor
APT28、オフィスの脆弱性を武器にしてNATOと軍隊をスパイ

APT28 Weaponizes Office Flaw to Spy on NATO & Military #DailyCyberSecurity (Feb 9)

securityonline.info/apt28-weapon...
APT28 Weaponizes Office Flaw to Spy on NATO & Military
APT28 (Fancy Bear) weaponized CVE-2026-21509 in 24 hours to target NATO. New "BeardShell" and "NotDoor" malware steals emails. Patch Office now.
securityonline.info
February 10, 2026 at 11:00 PM
#APT28 Weaponizes MS Office Flaw to #Spy on #NATO & #Military

#Russia state-sponsored group #FancyBear has launched a sophisticated espionage campaign, striking #Europe #military & #government through a major security vulnerability in #Microsoft #Office.

securityonline.info/apt28-weapon...
APT28 Weaponizes Office Flaw to Spy on NATO & Military
APT28 (Fancy Bear) weaponized CVE-2026-21509 in 24 hours to target NATO. New "BeardShell" and "NotDoor" malware steals emails. Patch Office now.
securityonline.info
February 9, 2026 at 9:00 AM
APT28 Weaponizes Office Flaw to Spy on NATO & Military
APT28 Weaponizes Office Flaw to Spy on NATO & Military
APT28 (Fancy Bear) weaponized CVE-2026-21509 in 24 hours to target NATO. New "BeardShell" and "NotDoor" malware steals emails. Patch Office now.
securityonline.info
February 9, 2026 at 4:09 AM
马尼亚和玻利维亚,目标组织包括国防部(40%)、运输/物流运营商(35%)和外交机构(25%)。攻击者利用尚未修复的漏洞安装了两种新后门程序 BeardShell 或 NotDoor。BeardShell 主要用于侦察,运行在内存中不会在硬盘上留下痕迹,NotDoor 则是监控电子邮件文件夹的 VBA 宏。
February 5, 2026 at 9:00 AM
APT28's NotDoor backdoor exploits Outlook macros for stealthy data exfiltration. Learn how to detect and mitigate this sophisticated threat. #CyberSecurity #APT28 #NotDoor #OutlookBackdoor Link: thedailytechfeed.com/apt28-deploy...
November 18, 2025 at 3:04 PM
Feed: "GBHackers Security | #1 Globally Trusted Cyber Security News Platform"
By: Mayura Kathir on Monday, November 17, 2025
New Detection Methods Uncovered for Outlook NotDoor Backdoor Malware
Cybersecurity researchers have unveiled comprehensive detection methodologies for NotDoor, a sophisticated backdoor malware that leverages Microsoft Outlook macros.
gbhackers.com
November 17, 2025 at 8:41 PM
Feed: "Cyber Security News"
By: Tushar Subhra Dutta on Monday, November 17, 2025
Researchers Detailed Techniques to Detect Outlook NotDoor Backdoor Malware
NotDoor, linked to APT28, hides in Outlook macros for stealthy access and data theft, using DLL sideloading to execute commands.
cybersecuritynews.com
November 17, 2025 at 6:57 PM
Researchers Detailed Techniques to Detect Outlook NotDoor Backdoor Malware
Researchers Detailed Techniques to Detect Outlook NotDoor Backdoor Malware
cybersecuritynews.com
November 17, 2025 at 11:34 AM
Detection Techniques for Outlook NotDoor Backdoor Malware Uncovered by Researchers The Splunk Threat Research Team has shed light on a new malware strain, NotDoor, which leverages Microsoft Outlook...

#Potato #Security #News #Malware #Outlook #NotDoor #Malware

Origin | Interest | Match
November 17, 2025 at 8:01 AM
Detection Techniques for Outlook NotDoor Backdoor Malware Uncovered by Researchers The Splunk Threat Research Team has shed light on a new malware strain, NotDoor, which leverages Microsoft Outlook...

#Cyber #Security #News #Malware #Outlook #NotDoor #Malware

Origin | Interest | Match
Detection Techniques for Outlook NotDoor Backdoor Malware Uncovered by Researchers
NotDoor Malware - The Splunk Threat Research Team has shed light on a new malware strain, NotDoor, which leverages Microsoft Outlook.
cyberpress.org
November 17, 2025 at 8:01 AM
S2 Grupo's intelligence team LAB52 reports a new Outlook backdoor, named NotDoor and attributed to APT28, that watches for specific trigger words and then exfiltrates data, uploads files, and executes commands on victim hosts. lab52.io/blog/analyzi...
October 7, 2025 at 9:39 AM
📢 Fancy Bear déploie NotDoor : backdoor Outlook via macros et DLL side-loading ciblant l’OTAN
📝 Selon le blog PolySwarm, le groupe lié au renseigneme…
https://cyberveille.ch/posts/2025-09-15-fancy-bear-deploie-notdoor-backdoor-outlook-via-macros-et-dll-side-loading-ciblant-lotan/ #APT28 #Cyberveille
September 16, 2025 at 10:30 PM
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware

The notorious Russian state-sponsored hacking unit, also known as Fancy Bear, is abusing Microsoft Outlook for covert data exfiltration.
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware
The notorious Russian state-sponsored hacking unit, also known as Fancy Bear, is abusing Microsoft Outlook for covert data exfiltration.
www.darkreading.com
September 15, 2025 at 8:48 PM
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware

The notorious Russian state-sponsored hacking unit, also known as Fancy Bear, is abusing Microsoft Outlook for covert data exfiltration.
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware
The notorious Russian state-sponsored hacking unit, also known as Fancy Bear, is abusing Microsoft Outlook for covert data exfiltration.
www.darkreading.com
September 15, 2025 at 8:16 PM
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware

The notorious Russian state-sponsored hacking unit, also known as Fancy Bear, is abusing Microsoft Outlook for covert data exfiltration.
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware
The notorious Russian state-sponsored hacking unit, also known as Fancy Bear, is abusing Microsoft Outlook for covert data exfiltration.
www.darkreading.com
September 15, 2025 at 8:01 PM
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware

The notorious Russian state-sponsored hacking unit, also known as Fancy Bear, is abusing Microsoft Outlook for covert data exfiltration.
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware
The notorious Russian state-sponsored hacking unit, also known as Fancy Bear, is abusing Microsoft Outlook for covert data exfiltration.
www.darkreading.com
September 15, 2025 at 7:33 PM
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware

The notorious Russian state-sponsored hacking unit, also known as Fancy Bear, is abusing Microsoft Outlook for covert data exfiltration.
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware
The notorious Russian state-sponsored hacking unit, also known as Fancy Bear, is abusing Microsoft Outlook for covert data exfiltration.
www.darkreading.com
September 15, 2025 at 7:02 PM
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware

The notorious Russian state-sponsored hacking unit, also known as Fancy Bear, is abusing Microsoft Outlook for covert data exfiltration.
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware
The notorious Russian state-sponsored hacking unit, also known as Fancy Bear, is abusing Microsoft Outlook for covert data exfiltration.
www.darkreading.com
September 15, 2025 at 6:31 PM
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware

The notorious Russian state-sponsored hacking unit, also known as Fancy Bear, is abusing Microsoft Outlook for covert data exfiltration.
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware
The notorious Russian state-sponsored hacking unit, also known as Fancy Bear, is abusing Microsoft Outlook for covert data exfiltration.
www.darkreading.com
September 15, 2025 at 6:04 PM
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware

The notorious Russian state-sponsored hacking unit, also known as Fancy Bear, is abusing Microsoft Outlook for covert data exfiltration.
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware
The notorious Russian state-sponsored hacking unit, also known as Fancy Bear, is abusing Microsoft Outlook for covert data exfiltration.
www.darkreading.com
September 15, 2025 at 5:33 PM
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware

The notorious Russian state-sponsored hacking unit, also known as Fancy Bear, is abusing Microsoft Outlook for covert data exfiltration.
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware
The notorious Russian state-sponsored hacking unit, also known as Fancy Bear, is abusing Microsoft Outlook for covert data exfiltration.
www.darkreading.com
September 15, 2025 at 5:03 PM
Fancy Bear are pulling some shit as usual. "According to Lab52, the backdoor is triggered when the client receives an email from the attackers with a specific string on a designated line. "If the string is found, the malware parses the email's contents to extract the commands to be executed,"
APT28 Targets Microsoft Outlook With 'NotDoor' Malware
The notorious Russian state-sponsored hacking unit, also known as Fancy Bear, is abusing Microsoft Outlook for covert data exfiltration.
www.darkreading.com
September 15, 2025 at 4:32 PM
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware

The notorious Russian state-sponsored hacking unit, also known as Fancy Bear, is abusing Microsoft Outlook for covert data exfiltration.
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware
The notorious Russian state-sponsored hacking unit, also known as Fancy Bear, is abusing Microsoft Outlook for covert data exfiltration.
www.darkreading.com
September 15, 2025 at 4:30 PM
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware

The notorious Russian state-sponsored hacking unit, also known as Fancy Bear, is abusing Microsoft Outlook for covert data exfiltration.
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware
The notorious Russian state-sponsored hacking unit, also known as Fancy Bear, is abusing Microsoft Outlook for covert data exfiltration.
www.darkreading.com
September 15, 2025 at 4:02 PM
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware

The notorious Russian state-sponsored hacking unit, also known as Fancy Bear, is abusing Microsoft Outlook for covert data exfiltration.
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware
The notorious Russian state-sponsored hacking unit, also known as Fancy Bear, is abusing Microsoft Outlook for covert data exfiltration.
www.darkreading.com
September 15, 2025 at 3:32 PM