APT28 conducts long

Back Securityaffairs

APT28 conducts long

Securityaffairs • March 10, 2026

Share: View original

APT28 used BEARDSHELL and COVENANT malware to spy on Ukrainian military personnel, enabling long-term surveillance since April 2024.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

APT28 Revives Advanced Malware Toolkit for Cyber-Espionage APT28, a Russian threat actor, has reactivated its malware development team and deployed a modern espionage toolkit that includes a customized version of the Covenant open-source tool. This resurgence indicates a renewed focus on cyber-espionage operations, potentially impacting various organizations targeted by state-sponsored hacking efforts. 10 sources 65

Extracted Entities

APT Groups (1)

Attack Types (1)

Malware (1)

Tools (1)