PDA

View Full Version : The Russian are coming



DaveB
21st April 2015, 09:38
For those that are interested in this sort of stuff, FireEye have a comprehensive and very interesting write up on ATP28, a group that appears to be a Russian state sponsored Cyber Espionage operation as well as a break down of what appears to be their latest exploits (and Exploits)

Exec Summary
https://www.fireeye.com/blog/executive-perspective/2015/04/go_ahead_make_myze.html

Technical write up
https://www.fireeye.com/blog/threat-research/2015/04/probable_apt28_useo.html

ATP28 profile and history.
https://www.fireeye.com/resources/pdfs/apt28.pdf