Check PointPublished
Unmasking APT29: The Sophisticated Phishing Campaign Targeting European Diplomacy
By rohann@checkpoint.com
Excerpt
Executive Summary
Check Point Research has been observing a sophisticated phishing campaign conducted by Advanced Persistent Threat (APT) 29, a Russian-linked threat group. The operation targeted diplomatic organizations throughout Europe.
The campaign appears to continue a previous operation called Wineloader, which impersonates a major European foreign affairs ministry to distribute fake invitations to diplomatic events, most commonly wine-tasting events. The campaign, which was spread via phishing emails, used a new malware dubbed Grapeloader. A new variant of Wineloader was also discovered, likely used in a later…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Check Point on blog.checkpoint.com.
Mentioned in the excerpt
More from Check Point88
- Gozi: The Malware with a Thousand FacesCheck Point · Published 28 Aug 2020
- Shattering the Dream - When a Job Offer Becomes a Zero-Day AttackCheck Point · Published 11 Aug
- Impersonation, Click Hijacking, and TDS: Inside a Malware Distribution EcosystemCheck Point · Published 3 Jun
- Cavern Manticore: Exposing Iran-Linked Modular C2 FrameworkCheck Point · Published 6 Jul
On the same topics
- Why Are You Texting Me? UNC3944 Leverages SMS Phishing Campaigns for SIM Swapping, Ransomware, Extortion, and NotorietyMandiant (Google) · Published 14 Sep 2023
- Same Sea, New Phish: Russian Government-Linked Social Engineering Targets App-Specific PasswordsCitizen Lab · Added 14 Oct
- Star Blizzard refines phishing and malware delivery with the RedFlick techniqueMicrosoft · Published 29 Sep
- ESET APT Activity Report Q4 2024-Q1 2025ESET · Added 21 May 2025
