Researchers from Fortinet have spotted a series of cyber-attacks targeting Russian service centers offering maintenance and support for various electronic goods. The first attacks were observed at the end of March when crooks sent spear-phishing emails to a service company that repairs Samsungs electronic devices. Experts highlighted the hackers conducted multi-stage attacks but excluded the involvement of a nation-state actor. The attacks use forged emails, malicious Office documents with exploits for a vulnerability that is 17 years old, and a commercial version of a RAT that is tucked into five different layers of protective packers.”]
Source: https://securityaffairs.co/wordpress/73440/cyber-crime/russian-service-centers-attacks.html