Phantom Pains. Large-scale cyber-espionage campaign and possible split of the APT group PhantomCore

The PhantomCore group is conducting large-scale, clandestine cyber-espionage attacks on critical Russian organizations. They are using a continuously updated arsenal of unique and legitimate tools, a segmented infrastructure, and are involving a new, low-skilled unit in their criminal activities. This indicates the group's evolution and a growing threat.