Russian Cyber Espionage Group Nebulous Mantis Targets NATO-Related Defense Organizations

The Russian-linked cyber espionage group Nebulous Mantis, also known as Cuba, STORM-0978, Tropical Scorpius, and UNC2596, is targeting defense organizations related to NATO. Since 2019, this group has been using the malware RomCom RAT and Hancitor to target critical infrastructures, governments, and entities linked to NATO. Since mid-2022, Nebulous Mantis has been deploying RomCom through spear-phishing campaigns for espionage activities, lateral movement, and data theft.