Outlook for Trouble: APT28’s NotDoor Backdoor Hits NATO Firms with Stealthy Hacks
Watch out, NATO! The Russian hacking group APT28 has unleashed their latest sneaky tool, NotDoor, a Microsoft Outlook backdoor. This cunning VBA macro snoops for trigger words in emails to execute commands and exfiltrate data. Think of it as the world’s worst email assistant—deleting your files instead of spam.
Hot Take:
Ah, the old “Nothing to see here” trick, but with a side of espionage! APT28 is back with NotDoor, proving once again that cybercrime is all about the thin line between ‘Nothing’ and everything you hold dear. It’s like they took the “Outlook for Dummies” manual and turned it into a “Hack NATO for Experts” guide. Bravo, you sneaky little devils!
Key Points:
- APT28, a Russian state-sponsored group, is behind the new Microsoft Outlook backdoor named NotDoor.
- NotDoor uses a VBA macro to exfiltrate data and execute commands triggered by specific email words.
- The malware is deployed using DLL side-loading via OneDrive’s executable.
- It involves obfuscated VBA scripts and PowerShell commands to maintain persistence and evade detection.
- The attack leverages Microsoft Dev Tunnels and Cloudflare Workers for stealthy C2 communications.
Already a member? Log in here