Sofacy, the Russian-speaking APT group connected to interference in the 2016 U.S. presidential election, has been targeting researchers, admins and others interested in cybersecurity.
Cisco’s security research arm Talos published a report on Sunday describing a campaign linked to Sofacy, also known as Fancy Bear and APT 28 among other names, using a decoy document related to the CyCon U.S. conference as a lure.
CyCon is marketed as an international conference on cyber conflict organized by NATO’s Cooperative Cyber Defense Center of Excellence, which is scheduled for Nov. 7 and 8 in Washington, D.C.
