A Custom Malware Is Used by Nobelium APT to Backdoor Windows Domains

The Nobelium hacking group is using a new malware to deploy additional payloads and steal sensitive info from the Active Directory Federation Services (AD FS) servers. Cozy Bear is a…