Security News Russian Cyberspies Are Using NSA Tools to Target European Hotels

[Solarquest]

After the US government has spent probably millions of dollars developing hacking tools, Russian hackers are now using them to spy on guests across hotels in Europe and the Middle East.

According to a report released today by US cyber-security firm FireEye, a well-known Russian cyber-espionage group has used an NSA exploit known as ETERNALBLUE as part of a complex set of hacks it carried out starting July this year.

This report marks the first time a Russian or any other cyber-espionage unit has used ETERNALBLUE in a live campaign after a group of hackers called The Shadow Brokers leaked the tool online in April this year.

APT28 targeted hotels with clever spear-phishing campaign
The Russian cyber-espionage unit that deployed ETERNALBLUE is usually referred to by the name of APT28 but is also referenced in other reports as Fancy Bear, Sofacy, Sednit, Tsar Team, Pawn Storm, or Strontium.

This group is infamous in cyber-security circles, being suspected of hacking the DNC (Democratic National Committee), NATO, and the German Bundestag. Many believe the group has ties to the Russian military intelligence service GRU.
...