{"id":771,"date":"2025-09-04T09:48:56","date_gmt":"2025-09-04T07:48:56","guid":{"rendered":"https:\/\/familiebuckens.nl\/?p=771"},"modified":"2025-09-05T09:49:28","modified_gmt":"2025-09-05T07:49:28","slug":"russian-apt28-deploys-notdoor-outlook-backdoor-against-companies-in-nato-countries","status":"publish","type":"post","link":"https:\/\/familiebuckens.nl\/index.php\/2025\/09\/04\/russian-apt28-deploys-notdoor-outlook-backdoor-against-companies-in-nato-countries\/","title":{"rendered":"Russian APT28 Deploys &#8220;NotDoor&#8221; Outlook Backdoor Against Companies in NATO Countries"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">The Russian state-sponsored hacking group tracked as&nbsp;<a href=\"https:\/\/thehackernews.com\/2024\/05\/kremlin-backed-apt28-targets-polish.html\" rel=\"noreferrer noopener\" target=\"_blank\">APT28<\/a>&nbsp;has been attributed to a new Microsoft Outlook backdoor called&nbsp;<strong>NotDoor&nbsp;<\/strong>in attacks targeting multiple companies from different sectors in NATO member countries.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">NotDoor &#8220;is a VBA macro for Outlook designed to monitor incoming emails for a specific trigger word,&#8221; S2 Grupo&#8217;s LAB52 threat intelligence team&nbsp;<a href=\"https:\/\/lab52.io\/blog\/analyzing-notdoor-inside-apt28s-expanding-arsenal\/\" rel=\"noreferrer noopener\" target=\"_blank\">said<\/a>. &#8220;When such an email is detected, it enables an attacker to exfiltrate data, upload files, and execute commands on the victim&#8217;s computer.&#8221;<\/p>\n\n\n<a class=\"wp-block-read-more\" href=\"https:\/\/familiebuckens.nl\/index.php\/2025\/09\/04\/russian-apt28-deploys-notdoor-outlook-backdoor-against-companies-in-nato-countries\/\" target=\"_self\"><a href=\"https:\/\/thehackernews.com\/2025\/09\/russian-apt28-deploys-notdoor-outlook.html\">Russian APT28 Deploys &#8220;NotDoor&#8221; Outlook Backdoor Against Companies in NATO Countries<\/a><span class=\"screen-reader-text\">: Russian APT28 Deploys &#8220;NotDoor&#8221; Outlook Backdoor Against Companies in NATO Countries<\/span><\/a>","protected":false},"excerpt":{"rendered":"<p>The Russian state-sponsored hacking group tracked as&nbsp;APT28&nbsp;has been attributed to a new Microsoft Outlook backdoor called&nbsp;NotDoor&nbsp;in attacks targeting multiple companies from different sectors in NATO member countries. NotDoor &#8220;is a VBA macro for Outlook designed to monitor incoming emails for a specific trigger word,&#8221; S2 Grupo&#8217;s LAB52 threat intelligence team&nbsp;said&#8230;.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[17],"tags":[40,9],"class_list":["post-771","post","type-post","status-publish","format-standard","hentry","category-vulnerability","tag-40","tag-russia"],"_links":{"self":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts\/771","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/comments?post=771"}],"version-history":[{"count":1,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts\/771\/revisions"}],"predecessor-version":[{"id":772,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/posts\/771\/revisions\/772"}],"wp:attachment":[{"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/media?parent=771"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/categories?post=771"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/familiebuckens.nl\/index.php\/wp-json\/wp\/v2\/tags?post=771"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}