Amazon Identified Internet domains Exploited by Russian APT29

The leading advanced persistent threat group in Russia has been phishing thousands of targets in businesses, government agencies, and military institutions.

APT29 (also known as Midnight Blizzard, Nobelium, and Cozy Bear) is one of the world’s most prominent threat actors. It is well known for the historic breaches of SolarWinds and the Democratic National Committee (DNC), which are carried out by the Russian Federation’s Foreign Intelligence Service (SVR). It has recently breached Microsoft’s codebase and political targets in Europe, Africa, and beyond.

“APT29 embodies the ‘persistent’ part of ‘advanced persistent threat,'” notes Satnam Narang, senior staff research engineer at Tenable. “It has persistently targeted organizations in the United States and Europe for years, utilizing various techniques, including spear-phishing and exploitation of vulnerabilities to gain initial access and elevate privileges. Its modus operandi is the collection of foreign intelligence, as well as maintaining persistence in compromised organizations in order to conduct future operations.”

In the same vei

[…]
Content was cut in order to protect the source.Please visit the source for the rest of the article.

This article has been indexed from CySecurity News – Latest Information Security and Hacking Incidents