Russian hacker group known by names APT28, Fancy Bear, Sofacy, Sednit, and STRONTIUM is behind a targeted attack campaign aimed at government bodies. Group delivered a hard-to-detect strand of Zebrocy Delphi malware under the pretense of providing NATO training materials. Researchers have deduced with medium-high confidence that the campaign targeted at least one Middle Eastern country Azerbaijan, among other NATO countries. The same campaign very likely targeted other NATO members or countries cooperating with NATO exercises.
Source: https://www.bleepingcomputer.com/news/security/russian-hackers-use-fake-nato-training-docs-to-breach-govt-networks/