Russian APT Deploys New ‘Kapeka’ Backdoor in Eastern European Attacks

A previously undocumented « flexible » backdoor called Kapeka has been « sporadically » observed in cyber attacks targeting Eastern Europe, including Estonia and Ukraine, since at least mid-2022.
The findings come from Finnish cybersecurity firm WithSecure, which attributed the malware to the Russia-linked advanced persistent threat (APT) group tracked as Sandworm (aka APT44 or

A previously undocumented « flexible » backdoor called Kapeka has been « sporadically » observed in cyber attacks targeting Eastern Europe, including Estonia and Ukraine, since at least mid-2022.
The findings come from Finnish cybersecurity firm WithSecure, which attributed the malware to the Russia-linked advanced persistent threat (APT) group tracked as Sandworm (aka APT44 or