FireEye report: Russian hacking group APT28 and their tradecraft
FireEye has released a report which discusses the tools-of-the-trade used by what it names APT28, the group of Russian state-sponsored hackers who are carrying out hacks to further promote the Russian political agenda.
The report kicks off by highlighting that on 29 December 2016, the Department of Homeland Security (DHS) and Federal Bureau of Investigation (FBI) released a Joint Analysis Report confirming FireEye's long-held public assessment that the Russian Government sponsors APT28.
According to FireEye, the group is almost certainly comprised of a sophisticated and prolific set of developers and operators, and has historically collected intelligence on defence and geopolitical issues. APT28 espionage activity has primarily targeted entities in the US, Europe, and the countries of the former Soviet Union, including governments and militaries, defence attaches, media entities, and dissidents and figures opposed to the current Russian Government.
