"Forkmeiamfamous": Seaduke, latest weapon in the Duke armory

Symantec describes Seaduke, a Python-based, highly configurable information‑stealing Trojan deployed by the Duke APT against select high-value government, diplomatic, and research targets; Seaduke is typically delivered via Cozyduke (encoded PowerShell tasks), communicates with layered Base64/RC4/AES over HTTP(S) to hundreds of compromised web servers, and supports payloads for email exfiltration, Kerberos pass‑the‑ticket impersonation, archiving, and secure deletion, reflecting a sophisticated long‑running espionage campaign.