Diplomatic entities across Eastern Europe have been targeted by Russian state-sponsored threat operation APT29, also known as BlueBravo, Cloaked Ursa, and Midnight Blizzard, with the novel GraphicalProton malware in phishing attacks from March to May, according to The Hacker News. APT29 has leveraged legitimate internet services to facilitate the obfuscation of Microsoft OneDrive or Dropbox, which served as its command-and-control servers in the GraphicalProton attacks, a Recorded Future report showed.

Source: SC Magazine