An Offer You Can Refuse: UNC2970 Backdoor Deployment Using Trojanized PDF Reader
UNC2970 is a cyber espionage group suspected to have a North Korea nexus.
APT29 Uses WINELOADER to Target German Political Parties | Mandiant
APT29 used a new backdoor variant publicly tracked as WINELOADER to target German political parties.