Jump to content

Fancy Bear Hackers Target Montenegro as Country Joins NATO


CrAKeN

Recommended Posts

fancy-bear-hackers-target-montenegro-as-

 

NATO's newest member hit by Fancy Bear

 

Earlier this week, Montenegro officially joined the North Atlantic Treaty Organization (NATO), something that Russia has expressed a strong opposition to, threatening to retaliate if it went through with this decision. The attacks,  however, seem to have been going on for months, as hackers linked to Russia launched cyberattacks on the country's government. 

 

According to security firm FireEye, the attacks aimed at the Montenegro government were spotted earlier this year and involved malware and exploits that were linked to the threat group APT28, also known as Fancy Bear, Tsar Team, Pawn Storm and many other names, Security Week reports. 

 

The latest attacks observed by researchers user spear-phishing emails to deliver malicious documents pertaining to a NATO secretary meeting, as well as a visit by a European army unit to the area. 

 

It is believed that the latter document may have been stolen and weaponized by the attackers. The malware attached to these documents is called GAMEFISH by FireEye and it has been exclusively connected to APT28. Other security companies have been tracking this backdoor under names such as Sednit or Sofacy. 

 

FireEye has refused to give too many details about this exploit, although it has informed its customers about the malware's delivery framework. 

 

How does it work?


SecurityWeek was told by FireEye that the malicious documents profile the targeted systems in an effort to determine which version of Flash Player is present, before a command and control (C&C) server is contacted and the appropriate Flash exploit is downloaded. The exploit is then used to deliver the malware. 

 

It is unclear at this point if the attacks were successful or not, but it is known that APT28 continuously targets NATO member states and NATO itself, so the attacks are likely to continue regardless. 

 

The group has also been involved in the US presidential election last fall, as well as the French elections last month. 

 

Source

Link to comment
Share on other sites


  • Replies 2
  • Views 656
  • Created
  • Last Reply

Fake news. This allegedly happened since last October/November. 

It was never proven, and never given any concrete proofs.

This is just a "sympathy hearsay" to gain support for Montenegro, as it did not organize referendum, or ratified ascension with the 2/3 parliament members majority required, but instead what they did was 50%+1, which was not legal according to a constitution.

 

Fake news.

 

I'm from Montenegro.

Link to comment
Share on other sites


Archived

This topic is now archived and is closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...