APT28: A WINDOW INTO RUSSIA’S CYBER ESPIONAGE OPERATIONS? SPECIAL REPORT SECURITY REIMAGINED 2 fireeye.com APT 28: A Window into Russia’s Cyber Espionage Operations? EXECUTIVE SUMMARY ................................................................................................................................................................................................................................................................ XXXXXXXXXX3 APT28 TARGETING REFLECTS RUSSIAN INTERESTS ..................................................................................................................................................... XXXXXXXXXX6 APT28 interest in the Caucasus, Particularly Georgia ........................................................................................................................................ XXXXXXXXXX7 APT28 Targeting of the Georgian Ministry of Internal Affairs (MIA) .................................................................... XXXXXXXXXX8 APT28 Targeting of the Georgian Ministry of Defense .................................................................................................................... XXXXXXXXXX9 APT28 Targeting a Journalist Covering the Caucasus ................................................................................................................... XXXXXXXXXX10 APT28’s Other Targets in the Caucasus .................................................................................................................................................................... XXXXXXXXXX11 APT28 Targeting of Eastern European Governments and Militaries ................................................................................ XXXXXXXXXX12 APT28 Targeting of NATO and Other European Security Organizations ................................................................. XXXXXXXXXX14 APT28 Targets European Defense Exhibitions ............................................................................................................................................ XXXXXXXXXX16 Other APT28 Targets Are Consistent With Nation State Interests ..................................................................................... XXXXXXXXXX17 APT28 MALWARE INDICATES SKILLED RUSSIAN DEVELOPERS ..................................................................................................... XXXXXXXXXX19 Modular Implants Indicate a Formal Development Environment............................................................................................ XXXXXXXXXX24 APT28 Malware Indicates Russian Speakers in a Russian Time Zone .............