Russian APTs employ HTTP-Shell for attacks on government entities. Spear-phishing campaign named "The Bear and the Shell" targets Russian government critics. Attacks utilize social engineering tactics and disguise files as job offers. HTTP-Shell allows remote access to victim's systems. Attackers pose as PDF editing site for command and control. Campaign extends beyond NASA theme, targeting USAID and news outlets. Attribution points to Russian state-sponsored threat actor. Concerns raised over targeted cyberattacks on dissenting voices. #RussianAPT #HTTPShell #CyberAttacks #GovernmentEntities #ThreatActor

https://cybersecuritynews.com/russian-apt-shell-attack/