Analysis of new malware used by APT28/SOFACY [FANCY BEAR/GRIZZLY STEPPE]

APT28 is a well known Russian APT that is also known as GRIZZLY STEPPE and FANCY BEAR which have, among other things, been reported on for hacking the DNC in 2016 [1], but have also attacked the EFF [2], the International Olympics Committee (2018) [3], and hundreds of journalists all over the globe [4].

[1] [PDF] https://us-cert.cisa.gov/sites/default/files/publications/JA...

[2] https://www.wired.com/story/fancy-bear-antidoping-olympics-h...

[3] https://www.nytimes.com/2018/01/10/sports/olympics/russian-h...

[4] https://www.staradvertiser.com/2017/12/22/breaking-news/russ...