Related Threat Clusters
-
Russian Hackers Exploit Zimbra Zero-Day for Espionage Campaign
Since July 2025, Russian state-backed hackers, known as Laundry Bear, have exploited a zero-click vulnerability (CVE-2025-66376) in the Zimbra Collaboration Suite to infiltrate Western government and commercial…
82 articles · Updated July 23, 2026 -
APT28 Exploits Vulnerable Routers for Global DNS Hijacking Campaign
Russian cyber group APT28, also known as Fancy Bear, has been exploiting vulnerabilities in TP-Link and MikroTik routers to conduct large-scale DNS hijacking operations. This campaign, which has affected over 18,000…
100 articles · Updated April 7, 2026 -
GRU Cyber Operations Targeting Ukraine and NATO Allies
The UK government has published a report detailing the cyber and hybrid threat operations of the Russian GRU, specifically focusing on Unit 29155. This unit has been linked to various cyber-attacks against Ukraine,…
3 articles · Updated August 25, 2026 -
APT28 Exploits Roundcube Vulnerabilities in Targeted Cyber Espionage Campaign
APT28 (Fancy Bear) has been linked to Operation Roundish, utilizing a comprehensive Roundcube exploitation toolkit against Ukrainian government targets. The toolkit, discovered in January 2026, includes XSS payloads, a…
3 articles · Updated July 23, 2026 -
FrostyNeighbor Cyberespionage Campaign Targets Ukrainian and Polish Governments
The Belarus-aligned cyber group FrostyNeighbor has launched a targeted campaign against government organizations in Ukraine and Poland since March 2026. Utilizing spearphishing techniques, the group delivers malicious…
8 articles · Updated May 14, 2026 -
China-aligned APT Groups Target Global Maritime and Tech Sectors Amid Geopolitical Tensions
ESET's latest APT Activity Report reveals that from October 2025 to March 2026, China-aligned threat actors engaged in extensive espionage campaigns, particularly in Venezuela and the Gulf region. Following U.S.…
6 articles · Updated May 28, 2026 -
Understanding Russia's Cyber Operations and Threat Landscape
In the wake of Russia's full-scale invasion of Ukraine in February 2022, Western expectations of cyber warfare were challenged as Russia did not execute the anticipated cyber 'kill strike' against Ukraine. Instead, the…
5 articles · Updated July 14, 2026 -
CallPhantom Fraudulent Apps Scam Millions of Android Users
A series of fraudulent apps named CallPhantom were discovered on Google Play, promising access to call histories for any phone number. Users were tricked into paying for subscriptions, only to receive fabricated data.…
7 articles · Updated May 7, 2026
Recent Intelligence Reports
- Threat Intelligence — www.eset.com · August 27, 2026
- Profile Gru Cyber And Hybrid Threat Operations — www.gov.uk · August 25, 2026
- Operation Roundpress — www.welivesecurity.com · July 24, 2026
- Unpacking Russias Cyber Nesting Doll — www.atlanticcouncil.org · July 14, 2026
- 621822 — www.cybersecuritydive.com · May 14, 2026
- ESET Threat Intelligence — www.eset.com · May 7, 2026
- Britain's internet routers under attack from Russian 'cyberspies', experts say — Mirror · April 7, 2026
- Britain's internet routers under attack from Russian 'cyberspies', experts say — Mirror · April 7, 2026