
The infamous Russian hacking collective, known as APT28, is now using a legitimate Microsoft Windows feature to deploy infostealers and other malware to their victims.
A new paper from IBM’s cybersecurity arm, X-Force claims the campaign has been active between November last year, and February this year.