PT Security say new APT named Dark River has targeted at least four Russian defense industry companies The group's main tool is the MataDoor backdoor https://www.ptsecurity.com/ww-en/analytics/pt-esc-threat-intelligence/dark-river-you-can-t-see-them-but-they-re-there/