EuropeRussian hackers targeted 2 defence firms and a police agency, Symantec says.
Symantec attributes the campaign to APT28, a group linked to Russian military intelligence.
A shipbuilder employee opened a malicious Word file in July, and the Hookedge backdoor let hackers hunt credentials.
Symantec analyst Dick O’Brien says researchers could not determine whether the attackers stole anything sensitive.
O’Brien says September activity shows the campaign is ongoing, and Symantec has not named the two NATO countries.
How each outlet framed it
- The Record leans critical
- traces the Hookedge backdoor and a memory-only decryption tool used against a naval shipbuilder, with infection dates from July 24 to September 24
Sources: The Record