Hackers gained access to sensitive NATO data - Yahoo!
The cyberespionage campaign of the APT28 group (Magnificent Bear) against organizations in one of the NATO countries demonstrated the vulnerability of critical structures in the alliance to cyber threats. According to Symantec researchers, within two months the attackers attacked a shipbuilding company, a government agency, a law enforcement agency and an aircraft engine manufacturer. The choice of targets indicates a desire to gain access to information related to the national security and defense capabilities of European countries. To penetrate corporate networks, hackers used the Hackedge malware, which was distributed via infected Microsoft Word documents. After such a document was opened by an employee of a shipbuilding company on July 24, 2026, the malware began collecting data about the device and its contents, contacting the attackers' infrastructure and probing the organization's internal network. The activity was recorded until the end of September. This incident shows how human error and vulnerabilities in internal information systems can become an entry point for a long-term covert intelligence operation. The APT28 campaign highlights that cyber threats to NATO go beyond individual organizations and affect the broader contours of European security. A compromise of defense industry enterprises and government agencies allows for the potential to gather information on technological capabilities, production processes and departmental activities. Such attacks require the allied countries not only to strengthen the protection of individual networks, but also to coordinate the exchange of threat data, to detect intrusions immediately and to constantly monitor critical infrastructures. Symantec's release of technical indicators of compromise is intended to help other organizations identify potential evidence of similar activity. Fresh international.