The Russia-linked APT29 nation-state actor has been found leveraging a « lesser-known » Windows feature called Credential Roaming as part of its attack against an unnamed European diplomatic entity.
« The diplomatic-centric targeting is consistent with Russian strategic priorities as well as historic APT29 targeting, » Mandiant researcher Thibault Van Geluwe de Berlaere said in a technical write-up.

The Russia-linked APT29 nation-state actor has been found leveraging a « lesser-known » Windows feature called Credential Roaming as part of its attack against an unnamed European diplomatic entity.
« The diplomatic-centric targeting is consistent with Russian strategic priorities as well as historic APT29 targeting, » Mandiant researcher Thibault Van Geluwe de Berlaere said in a technical write-up.