Russia's 'Fancy Bear' APT Continues Its Global Onslaught

Trend Micro and government reporting detail active operations by Fancy Bear (APT28/Pawn Storm) targeting defense and government supply chains using a Prismex malware suite (including steganography, COM hijacking, cloud abuse and wiper capabilities), NTLMv2 relay attacks exploiting CVE-2023-23397, and router-based DNS hijacking via CVE-2023-50224; the coverage includes observed targets, timelines (2022–2025+), and mitigation advice such as patching, MFA, router firmware updates, and zero trust controls.