Kremlin-Backed APT28 Targets Polish Institutions in Large-Scale Malware Campaign
APT28, a nation-state actor with ties to Russia, is behind a widespread malware campaign that has attacked Polish government institutions.
The computer emergency response team, CERT Polska, stated in a report on Wednesday that the campaign used emails with content meant to pique the recipient's curiosity and get him to click on the link.
In an attempt to avoid detection, clicking on the link takes the victim to the domain run.mocky[.]io, which is then used to redirect to another genuine website called webhook[.]site. This free service enables developers to inspect data that's being supplied via a webhook.
Using the webhook[.]site, download a ZIP archive file containing the Windows Calculator binary, which is posing as a JPG image file read more Kremlin Backed APT28 Targets Polish...