Russian state-affiliated hacking group APT29 has launched a phishing campaign targeting diplomatic offices across Europe. The campaign uses a new version of WINELOADER malware and a previously undisclosed malware loader called GRAPELOADER. Targets are lured with fake invites for wine-tasting events purportedly from the European Ministry of Foreign Affairs, and the malware is deployed via a ZIP file when the email link is clicked. The main targets are embassies in European countries.

Chinese Hackers Update MysterySnail Malware to Infiltrate Sensitive Government Networks
The Chinese-speaking hacker group IronHusky has been deploying updated versions of the MysterySnail remote access trojan (RAT) malware against Russian and Mongolian government organizations. The