Feeds2.Feedburner

Sednit Group Resurfaces with SlimAgent Keylogger in Ukraine

First seen 10 Mar 2026, 13:11 UTC • Welivesecurity

•60.0

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

ESET researchers have identified the resurgence of the Sednit group, a notorious Russian cybercriminal organization, linked to the deployment of a keylogger named SlimAgent in Ukraine. This activity is traced back to a case from 2024, indicating a targeted campaign against Ukrainian entities.

How this analysis works

Timeline

2024-01-15

Sednit's SlimAgent keylogger first detected in Ukraine

2026-03-10

ESET publishes findings on Sednit's resurgence

Continue Reading

APT28 Exploits MSHTML Zero-Day Vulnerability in Windows APT28 Exploits Zimbra Vulnerability in Ongoing Attacks Against Ukraine GRU Compromises Home Routers in 23 States to Steal Outlook Credentials Russian Hackers Exploit Zimbra Zero-Day for Espionage Campaign Critical RCE Vulnerability in Zimbra Exploited by Attackers Widespread DNS Poisoning Campaign Targets Hotel Wi-Fi to Steal Credentials

Sednit Group Resurfaces with SlimAgent Keylogger in Ukraine

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading