F-Secure_Dukes_Whitepaper.pdf

**Executive summary:** The F-Secure whitepaper documents seven years (2008–2015) of operations by the Dukes (APT29), cataloguing numerous malware toolsets (MiniDuke, CosmicDuke, OnionDuke, CozyDuke, CloudDuke, SeaDuke, HammerDuke, PinchDuke, GeminiDuke), infection vectors (spear-phishing, malicious Tor exit, trojanized torrents), TTPs, detailed IOCs (SHA1 hashes, domains, IPs), campaign timelines and an assessment attributing the activity to Russian state-sponsored cyberespionage.