VERY IMPORTANT

This paper presents an analysis of a new and never publicly reported malware internally dubbed as "SkinnyBoy". Based on long-term observations and technical evidences, Cluster25 cyber intelligence research team associates this implant, with a medium-high degree of confidence, with the threat actor known as APT 28 / Fancy Bear / Pawn Storm.