Researchers warn that the Russia-linked APT has freshened up their tools with an improved downloader and more. The Sednit threat group has kicked off a fresh spearphishing campaign, that was spotted targeting government entities with the Zebrocy backdoor. The malware features a rewritten and newly-improved backdoor and downloader, indicating an ongoing evolution for the custom code. Sednit has been around since 2004 and aims to steal information from victims mostly in the political realm.
Source: https://threatpost.com/zebrocy-retools-political-attacks/148593/