APT28 targeted NATO shipbuilder, engine maker and police agency
Symantec says the operators used Hookedge and an undocumented loader, ld.exe, whose decrypted payload was not recovered.
76
Malware
ld.exe
- Mentions · 7d0
- Mentions · 30d1
- All mentions1
- First seenOct 20, 2026
- Last mentioned10d ago
Timeline
1 articles · newest firstAppears with
- APT28threat actor · 1
- Symantecorganization · 1
- Swallowtailthreat actor · 1
- GRUorganization · 1
- Forest Blizzardthreat actor · 1
- Hookedgemalware · 1
- Recorded Futureorganization · 1
- Fancy Bearthreat actor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.