The Russian are coming

[DaveB]

For those that are interested in this sort of stuff, FireEye have a comprehensive and very interesting write up on ATP28, a group that appears to be a Russian state sponsored Cyber Espionage operation as well as a break down of what appears to be their latest exploits (and Exploits)

Exec Summary
https://www.fireeye.com/blog/executi...make_myze.html

Technical write up
https://www.fireeye.com/blog/threat-...pt28_useo.html

ATP28 profile and history.
https://www.fireeye.com/resources/pdfs/apt28.pdf