APT28__2017__APT28-Center-of-Storm-2017.pdf

FireEye's January 2017 special report profiles APT28, a sophisticated Russia‑linked threat actor active since at least 2007, documenting its espionage and information‑operation activities (including breaches of the DNC and WADA), detailed tooling (backdoors, downloaders, credential harvesters), exploitation of zero‑day and known vulnerabilities, and tactics such as spear‑phishing, strategic web compromise, and credential/OAuth abuse used to steal and leak data to advance Russian strategic objectives.