APT28__2018__Accenture-snakemackerel-delivers-zekapab-malware.pdf

Accenture/iDefense reports that the SNAKEMACKEREL (APT28/Fancy Bear) group conducted a spear-phishing campaign using a BREXIT-themed lure document to deliver Zekapab (Zebrocy) first-stage malware; the activity aligns with the group's longstanding targeting of NATO, government and defense-related organizations and is publicly attributed to Russian military intelligence, with recommendations for security hygiene and intelligence-driven defenses.