APT29 Re-Emerges After 2 Years with Widespread Espionage Campaign

A phishing campaign bent on espionage, believed to be launched by the nation-state threat group known as APT29, is targeting high-value targets across the think-tank, law enforcement, media, U.S. military, imagery, transportation, pharmaceutical, national government and defense contracting sectors.

It’s the first large-scale campaign seen in two years from APT29, which researchers believe to be an attack group linked to Russian intelligence.

According to researchers at FireEye, the phishing emails purport to be from the U.S. Department of State with links to zip files containing malicious Windows shortcuts.