APT29__2015__F-Secure_Dukes_Whitepaper.pdf

**F-Secure whitepaper summarizing seven+ years (2008–2015) of operations by the Dukes (APT29):** the report tracks their evolving toolsets, infection vectors (spear-phishing, malicious Tor exit nodes, trojanized torrents), exploitation of vulnerabilities (including a purchased zero-day), extensive IOCs (SHA1 hashes, domains, IPs), operational patterns, and attribution evidence indicating Russian state sponsorship.