Defense contractors in two NATO allies hacked in recent Russia-linked campaign
Researchers say APT28, the Russian hacking group also known as Fancy Bear, used a newly documented backdoor to breach the networks of defense contractors and a law enforcement agency in two NATO member countries. The group maintained persistent access inside the targeted organizations before being detected.
Why this matters: Defense contractors hold weapons specs, procurement details, and operational intelligence. A law enforcement agency holds criminal records, informant data, and active case files. APT28 sitting quietly inside those networks is not just an espionage win for Russia. It is a slow bleed of exactly the information NATO allies need to keep secret. The backdoor being newly documented means defenders were not looking for it. That gap is the real story here — not just who got hit, but how long they had access before anyone noticed.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.