The cyber espionage group APT28 has been linked to a new backdoor malware named NotDoor, which targets Microsoft Outlook users. This sophisticated malware allows attackers to maintain persistent access to compromised systems by exploiting vulnerabilities in Outlook, enabling them to steal sensitive information and conduct surveillance. NotDoor operates stealthily, evading detection by traditional security tools, and is part of APT28's ongoing campaign to infiltrate government and military networks. The malware's deployment highlights the increasing threat posed by state-sponsored groups leveraging advanced techniques to compromise widely used software platforms. Organizations using Microsoft Outlook are urged to enhance their security posture by applying the latest patches, monitoring network traffic for unusual activity, and employing advanced endpoint detection and response solutions. This incident underscores the critical need for continuous vigilance and proactive defense strategies against evolving cyber threats from nation-state actors.
This Cyber News was published on www.darkreading.com. Publication date: Wed, 03 Sep 2025 21:00:08 +0000