Back Securityaffairs.Co

APT28 conducts long

Securityaffairs.Co •Pierluigi Paganini • March 10, 2026

APT28 used BEARDSHELL and COVENANT malware to spy on Ukrainian military personnel, enabling long-term surveillance since April 2024. The Russia-linked group APT28 (aka UAC-0001, aka Fancy Bear, Pawn Storm, Sofacy Group, Sednit, BlueDelta, and STRONTIUM) has used BEARDSHELL and COVENANT malware to conduct long-term surveillance of Ukrainian military personnel. According to ESET, the campaign began in April 2024 and relies on […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

APT28 Revives Advanced Malware Toolkit for Cyber-Espionage APT28, a Russian threat actor, has reactivated its malware development team and deployed a modern espionage toolkit that includes a customized version of the Covenant open-source tool. This resurgence indicates a renewed focus on cyber-espionage operations, potentially impacting various organizations targeted by state-sponsored hacking efforts. 10 sources 65

Extracted Entities

APT28 conducts long

The full story

Extracted Entities

APT Groups (8)

Attack Types (1)

Malware (1)

Tools (1)