BlueDelta Hackers Attacking Users of Widely Used Ukrainian Webmail and News Service

Cybersecuritynews •Tushar Subhra Dutta • December 19, 2025

A new credential-harvesting campaign has been discovered targeting users of UKR.NET, a popular Ukrainian webmail and news platform. The attacks are linked to BlueDelta, a Russian state- hacker group also known as APT28, Fancy Bear, and Forest Blizzard. This group has been running operations for over ten years, focusing on stealing login credentials from government […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

BlueDelta Hackers Target Ukrainian Webmail Users in Credential-Harvesting Campaign BlueDelta, a Russian state-sponsored hacker group, is conducting a credential-harvesting campaign targeting users of UKR.NET, a widely used Ukrainian webmail and news service. The group, also known as APT28 and Fancy Bear, has been active for over a decade, focusing on stealing login credentials from government and private sector users. 2 sources 24

Extracted Entities

BlueDelta Hackers Attacking Users of Widely Used Ukrainian Webmail and News Service

The full story

Extracted Entities

APT Groups (3)

Countries (1)

Domains (1)

Industries (1)