Dragonfly: Western energy sector targeted by sophisticated attack group

Symantec describes Dragonfly 2.0, a sophisticated, long-running APT campaign (active since at least 2011, resurging in 2015–2017) that targets the western energy sector (US, Switzerland, Turkey) using spear-phishing, watering-hole attacks, trojanized software, and credential theft to deploy backdoors (Goodor, Karagany.B, Dorshel, Heriplor); the report provides malware IOCs, evidence the attackers accessed operational systems (raising sabotage risk), and recommended protections and detections.