Researchers at Palo Alto Networks have discovered new malware being used by the Kremlin-backed hacking group Fancy Bear.

Cannon is a new early phase of a multi-stage attack — it communicates basic information with command and control servers and downloads new malware. The “cannon” malware uses email to communicate with its command and control server.

It has only been observed in a single campaign. The malware was sent to government officials in North America, Europe and a former Soviet state, according to the Palo Alto Networks write-up.

Read more at AXIOS.