Russia's APT29 Abuses Windows Feature to Compromise European Diplomatic Entity

During the short timespan that APT29 was determined to be active inside the victim network, Mandiant observed numerous LDAP queries with atypical properties performed against the Active Directory system.