Related Threat Clusters
-
China-aligned APT Groups Target Global Maritime and Tech Sectors Amid Geopolitical Tensions
ESET's latest APT Activity Report reveals that from October 2025 to March 2026, China-aligned threat actors engaged in extensive espionage campaigns, particularly in Venezuela and the Gulf region. Following U.S.…
6 articles · Updated May 28, 2026 -
APT28 Revives Advanced Malware Toolkit for Cyber-Espionage
APT28, a Russian threat actor, has reactivated its malware development team and deployed a modern espionage toolkit that includes a customized version of the Covenant open-source tool. This resurgence indicates a…
10 articles · Updated March 10, 2026 -
Sednit Group Resurfaces with SlimAgent Keylogger in Ukraine
ESET researchers have identified the resurgence of the Sednit group, a notorious Russian cybercriminal organization, linked to the deployment of a keylogger named SlimAgent in Ukraine. This activity is traced back to a…
4 articles · Updated March 10, 2026 -
Cyberattacks Target Ukraine and EU via Microsoft Office Vulnerability
CERT-UA has reported a new wave of cyberattacks targeting Ukrainian government agencies and EU organizations, exploiting the Microsoft Office vulnerability CVE-2026-21509. Attackers are using malicious emails disguised…
59 articles · Updated February 2, 2026
Recent Intelligence Reports
- ESET Research APT Report: China-aligned groups spy in Venezuela and the Gulf, target AI ... — Markets.Businessinsider · May 28, 2026
- ESET APT Activity Report Q4 2025–Q1 2026 — Welivesecurity · May 28, 2026
- Russian Threat Actor Sednit Resurfaces With Sophisticated Toolkit — Darkreading · March 10, 2026
- APT28 conducts long — Securityaffairs · March 10, 2026
- APT28 conducts long — Securityaffairs.Co · March 10, 2026
- APT28 Uses BEARDSHELL and COVENANT Malware to Spy on Ukrainian Military — Thehackernews · March 10, 2026
- This spy tool has been quietly stealing data for years — Feeds2.Feedburner · March 10, 2026
- Russian hackers exploit recently patched Microsoft Office bug in attacks — Bleepingcomputer · February 2, 2026