Quoting from the link:

* Swallowtail (aka APT28, Fancy Bear, Forest Blizzard), a Russian espionage group, targeted organizations in two NATO member states, including a law enforcement agency, a naval shipbuilder, and a manufacturer of military aircraft engines.

* In the attack against the naval shipbuilder, the attackers used the Hookedge backdoor to reach deeper into the network during an intrusion that lasted at least two months. They stole credentials and opened a persistent SSH tunnel from their own server into the shipbuilder's internal network. 

* The attackers deployed a previously undocumented loader, ld.exe, which decrypts its payload and runs it in memory. The encrypted payload will not fire without a key supplied only at runtime. 

From the abstract (bold emphasis added):

“[…] Drawing on the analytical tools developed in the literature on intelligence failure, this study offers a systemic interpretation of this strategic surprise. It demonstrates that the causes of the October 7 failure lay in a combination of shortcomings in intelligence collection, the persistence of unchallenged analytical assumptions, bureaucratic routines, and dysfunctions in the relationship between intelligence services and political authorities. It also shows that the operation under way in the Gaza Strip since October 27, 2023 has reshaped the division of responsibilities among the services, and that the major successes of the operations conducted in 2024 and 2025 against Hezbollah and Iran, while demonstrating a high degree of technical proficiency and confirming the offensive power of Israeli intelligence, should not be confused with a genuine incorporation of the lessons of the October 7 failure. […]”

“[…] On Oct. 8, in the wake of Russia’s nationwide legislative elections, the European Parliament overwhelmingly declared the resulting State Duma in Moscow to be illegitimate — the result of a stage-managed “vote” that was neither free nor fair. Nevertheless, 42 European lawmakers voted against what might have seemed to be an obvious resolution. Even after Russia’s full-scale invasion of Ukraine, the European Parliament’s faction of so-called Putinversteher — a German term meaning people who profess to “understand Putin” (and often rationalize Kremlin policies) — remains firmly in place. They continue to travel to Russia, repeat Kremlin narratives, and meet with Kremlin officials and intelligence officers involved in managing foreign influence networks. […]”

“[…] This is the first-ever public confirmation of zero-click mercenary spyware delivered via targeted ads. We call the technique AdFection, and show how it was used to infect devices at Al Jazeera with Candiru’s spyware. We also uncover Discover-Tech, and show how the company helps mercenary surveillance vendors track and hack devices around the world. […]”

Also, an article on this at The Guardian: https://www.theguardian.com/technology/2026/oct/15/israeli-firm-digital-ads-enabling-installation-of-zero-click-spyware-researchers-say

Obviously please don’t share classified information. I’m just trying to connect the dots here