[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fvQbKRvVxA5wt61ygMMd2JWEeCl4lKyZWnoKpMsMFPyA":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":9,"country":10,"suspected_sponsor":10,"target_industries":11,"target_countries":12,"incident_types":13,"references":14,"techniques":16,"technique_count":17,"created_at":18,"seoMetadata":19,"schemaOrg":23},"HollowQuill","hollowquill",[],"SEQRITE Labs APT-Team has been tracking and has uncovered a campaign targeting the Baltic State Technical University, a well-known institution for various defense, aerospace, and advanced engineering programs that contribute to Russia’s military-industrial complex. Tracked as Operation HollowQuill, the campaign leverages weaponized decoy documents masquerading as official research invitations to infiltrate academic, governmental, and defense-related networks. The threat entity delivers a malicious RAR file which contains a .NET malware dropper, which further drops other Golang based shellcode loader along with legitimate OneDrive application and a decoy-based PDF with a final Cobalt Strike payload.",null,[],[],[],[15],"https:\u002F\u002Fwww.seqrite.com\u002Fblog\u002Foperation-hollowquill-russian-rd-networks-malware-pdf\u002F",[],0,"2025-04-19T01:15:05.852388+00:00",{"title":20,"metaDescription":21,"keywords":22},"HollowQuill Threat Actor Profile | EdgeProtect","SEQRITE Labs APT-Team has been tracking and has uncovered a campaign targeting the Baltic State Technical University, a well-known institution for var...","HollowQuill, threat actor, APT, cyber threat, threat intelligence",{"@context":24,"@type":25,"name":6,"alternateName":26,"description":9,"url":27,"mainEntityOfPage":28},"https:\u002F\u002Fschema.org","Organization",[],"https:\u002F\u002Fdev.precursorintelligence.com\u002Fthreat-actors\u002Fhollowquill",{"@type":29,"@id":27},"WebPage"]