A group linked to the Russian military intelligence agency GRU attacked organizations operating in the defence industries of 2 NATO countries. Symantec researchers reconstructed the course of 1 of the breaches, determining how the attackers gained access to successive resources while attempting to get login credentials. They besides detected a previously unknown tool utilized by the attackers.