Fancy Bear Hackers Abuse Microsoft Zero-Day in Email Theft Campaign

Back Cyberpress

Fancy Bear Hackers Abuse Microsoft Zero-Day in Email Theft Campaign

Cyberpress • February 10, 2026

Share: View original

Russia-linked hackers known as Fancy Bear have launched a sneaky cyberattack called Operation Neusploit. They exploit a fresh zero - day flaw.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fancy Bear Exploits Microsoft Zero-Day Vulnerability CVE-2026-21509 The Russian cyber espionage group Fancy Bear, also known as APT28, has initiated Operation Neusploit, exploiting a zero-day vulnerability (CVE-2026-21509) in Microsoft RTF files. This vulnerability allows attackers to execute arbitrary code on victim systems, leading to the deployment of backdoors and email stealers, targeting various organizations. 3 sources 34

Extracted Entities

APT Groups (1)

Attack Types (1)

Zero-day Exploit

Campaigns (1)

Operation Neusploit

Companies (1)