Skip to content
CANFAIL Malware Targets Ukrainian Defense and Energy Sectors

CANFAIL Malware Targets Ukrainian Defense and Energy Sectors

First seen 15 Feb 2026, 18:09 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 16:10 UTC

A series of cyberattacks attributed to a suspected Russian state-aligned threat actor has targeted Ukrainian organizations using a new malware family called CANFAIL. The attacks, identified by Google's Threat Analysis Group, focus on the defense, government, energy, and humanitarian sectors, employing advanced phishing techniques for delivery.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 213d ago How this analysis works

Timeline

2026-02-14
Securityaffairs.Co reports on CANFAIL malware targeting Ukraine
2026-02-15
Rescana publishes technical analysis of CANFAIL malware

More articles in this cluster (2)

Following this threat?

Track APT28 and Canfail in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed