Kaspersky Global Research and Analysis Team (GReAT) has revealed the resurgence of the HackingTeam successor, Memento Labs, linked to a sophisticated cyberespionage campaign dubbed Operation ForumTroll. This operation exploited a zero-day vulnerability in Google Chrome, targeting Russian media outlets and institutions through phishing emails disguised as forum invitations. The analysis identified the use of a unique spyware, LeetAgent, and another variant named Dante, which shares characteristics with previously observed malware, indicating a continuity in advanced cyber threats. The findings underscore the evolving nature of cyberespionage and present significant concerns for targeted entities, highlighting the need for robust cybersecurity measures amidst increasing sophistication in APT attacks.