Skip to content
Sednit Group Resurfaces with SlimAgent Keylogger in Ukraine

Sednit Group Resurfaces with SlimAgent Keylogger in Ukraine

First seen 10 Mar 2026, 13:11 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 16:10 UTC

ESET researchers have identified the resurgence of the Sednit group, a notorious Russian cybercriminal organization, linked to the deployment of a keylogger named SlimAgent in Ukraine. This activity is traced back to a case from 2024, indicating a targeted campaign against Ukrainian entities.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 218d ago How this analysis works

Timeline

2024-01-15
Sednit's SlimAgent keylogger first detected in Ukraine
2026-03-10
ESET publishes findings on Sednit's resurgence

More articles in this cluster (4)

Following this threat?

Track APT28, BeardShell and CVE-2026-21509 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed