Kremlin-Backed APT28 Targets Polish Institutions in Large-Scale Malware Campaign

Kremlin-Backed APT28 Targets Polish Institutions in Large-Scale Malware Campaign. APT28 orchestrated a large-scale malware campaign targeting Polish government institutions by sending emails with links to legitimate sites running.mocky[.]io and webhook[.]site, allowing them to evade detection and run malicious DLL and batch scripts. The attack chain is similar to a previous campaign using a custom backdoor called HeadLace. APT28's repeated tactic is to abuse legitimate services to sidestep security software detection