Microsoft Outlook Flaw Exploited by Russia's APT28 to Hack Czech, German Entities

Czech and German authorities disclosed a long-running GRU‑linked APT28 espionage campaign leveraging an Outlook privilege‑escalation vuln (CVE-2023-23397) and other exploits (including a Print Spooler zero‑day CVE-2022-38028) to access Net-NTLMv2 hashes, relay-authenticate, compromise numerous email accounts, and deliver custom malware (GooseEgg); the actors also used a criminal proxy botnet of compromised routers and pro‑Russia hacktivists have targeted ICS/OT and conducted DDoS operations, prompting multi‑agency warnings and mitigation recommendations.