Securelist | The "Red October" Campaign - Securelist

Rocra (Red October) is a long-running, highly targeted cyber-espionage campaign that has infected hundreds of victims worldwide, predominantly government and energy-related organizations; it uses customized spear-phishing documents exploiting MS Excel/Word flaws, a modular malware framework with mobile and desktop components, and a sprawling command-and-control network to exfiltrate sensitive data and maintain persistence.