highCyber Attacks
APT28 Deploys New Reflective Loader in NATO Naval Shipbuilder Breach
The Russia-linked state-sponsored threat actor APT28 (also known as BlueDelta, Fancy Bear, and Forest Blizzard) has been attributed to attacks targeting two NATO member states. According to Symantec's Threat Hunter Team, tracked under the moniker Swallowtail, the operation involved the use of a new reflective loader and a backdoor identified as HOOKEDGE. The target includes a NATO naval shipbuilder, with the attacks leveraging supply chain or credential-based initial access. The incidents occurred in October 2026 and highlight the ongoing threat to defense industrial base infrastructure from sophisticated state-aligned actors.
The Hacker News1 min read