Cybersecurity incident — 2017-06-06 00:00:00
Affected organization: Romanian Ministry of Foreign Affairs
Affected country: Romania
Industry: Public Administration
Event type: Exploitive
Event subtype: Exploitation of Application Server,Exploitation of End Hosts
Motive: Political-Espionage
Actor: GRU 85th Main Special Service Center (Unit 26165) (FANCYBEAR)
Actor type: Nation-State
Actor country: Russian Federation

APT28 has targeted the Romanian Ministry of Foreign Affairs with phishing emails by spoofing a NATO email address.