Russian Cyberespionage Group APT29 Linked to Sophisticated Phishing Campaign

The Russian cyberespionage group APT29 has been linked to a sophisticated phishing campaign targeting diplomatic entities in Europe. This campaign employs a new variant of WINELOADER and a previously unknown malware loader named GRAPELOADER. Although WINELOADER remains a modular backdoor used in later stages, GRAPELOADER is a new initialization tool. The attacks exploit wine-tasting-related lures to attract victims.