Cyber Espionage Operation on Embassies Linked to Russia’s Cozy Bear Hackers

The Cozy Bear APT utilized a legitimate tool called Ngrok to obfuscate their activities and communicate with compromised systems, making detection and attribution more challenging.