vulnerabilities. For example, in early 2015, APT28 likely exploited two zero-day vulnerabilities in Adobe Flash and Microsoft Windows in an attack against a government contractor.14 In a separate incident in July 2015, APT28 rapidly integrated into