Search: “apt29”

369 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Threat actor 116 Malware 73 Data breach 48 Vulnerability 41 Exploit / PoC 38 Ransomware 37 Phishing & fraud 11 Policy & legal 6 Advisory 1

SeverityAll critical 138 high 178 medium 40 low 15 info 0

Russian APT29 Group Targets German Politicians

Infosecurity MagazineMar 25, 09:30 UTC · Mar 25, 2024Threat actor

57

Amazon Stops Russian APT29 Watering Hole Attack

Infosecurity MagazineSep 1, 11:00 UTC · Sep 1, 2025Threat actor

60

Russia-linked APT29 reused iOS and Chrome exploits previously developed by NSO Group and Intellexa

Security AffairsAug 30, 05:33 UTC · Aug 30, 2024Threat actor in the wildCVE-2023-41993 CVE-2024-5274 CVE-2024-4671+1 CVEs

60

Russia-linked Cozy Bear uses evasive TTPs to target Microsoft 365

Security AffairsAug 19, 23:20 UTC · Aug 19, 2022Threat actor1

60

Russia-linked APT29 targets diplomatic and government organizations

Security AffairsMay 2, 05:34 UTC · May 2, 2022Threat actor

57

UK NCSC blames APT29 for attacks on COVID

Security AffairsJul 16, 14:46 UTC · Jul 16, 2020Threat actor

60

APT29 group used domain fronting to evade detection long before these techniques were widely known

Security AffairsMar 28, 05:30 UTC · Mar 28, 2017Threat actor

45

Amazon shuts down watering hole attack attributed to Russia’s APT29 hacking group

The RecordSep 3, 00:03 UTC · Sep 3, 2025Threat actor1

45

Amazon Disrupts APT29 Watering Hole Campaign Abusing Microsoft Device Code Authentication

The Hacker NewsAug 30, 04:26 UTC · Aug 30, 2025Threat actor

45

APT29 hit German political parties with bogus invites and malware

Help Net SecurityMar 25, 00:00 UTC · Mar 25, 2024Malware

42

APT29 revamps its techniques to breach cloud environments

Help Net SecurityFeb 27, 00:00 UTC · Feb 27, 2024Threat actor

57

APT29 is targeting Ministries of Foreign Affairs of NATO

Security AffairsAug 17, 23:26 UTC · Aug 17, 2023Threat actor

57

Russian APT29 conducts phishing attacks through Microsoft Teams

Security AffairsAug 3, 07:21 UTC · Aug 3, 2023Threat actor

45

UK and US share more vulnerabilities exploited by Russia's APT29 hackers

The RecordDec 9, 00:00 UTC · Dec 9, 2022Vulnerability in the wildCVE-2018-13379 CVE-2019-1653 CVE-2019-2725+9 CVEs

60

APT29 Exploited a Windows Feature to Compromise European Diplomatic Entity Network

The Hacker NewsNov 11, 11:51 UTC · Nov 11, 2022Threat actor CVE-2022-30170

60

Cybaze ZLab - Yoroi team analyzed malware used in recent APT29 attacks

Security AffairsNov 19, 13:49 UTC · Nov 19, 2018Malware

42

Amazon blocks APT29 campaign targeting Microsoft device code authentication

Security AffairsAug 31, 05:46 UTC · Aug 31, 2025Threat actor1

45

Russia-linked APT29 targets European diplomatic entities with GRAPELOADER

Security AffairsApr 21, 08:12 UTC · Apr 21, 2025Malware

42

Russia-linked APT29 switched to targeting cloud services

Security AffairsJun 30, 12:31 UTC · Jun 30, 2024Threat actor

57

Russia-linked APT29 targeted German political parties with WINELOADER backdoor

Security AffairsMar 23, 18:21 UTC · Mar 23, 2024Malware

42

Russia-linked APT29 spotted targeting JetBrains TeamCity servers

Security AffairsDec 14, 15:12 UTC · Dec 14, 2023Threat actor CVE-2023-42793

60

APT29 group exploited WinRAR 0day in attacks against embassies

Security AffairsNov 20, 13:44 UTC · Nov 20, 2023Threat actor CVE-2023-38831

60

Russia-linked APT29 is behind recent attacks targeting NATO and EU

Security AffairsApr 13, 20:19 UTC · Apr 13, 2023Threat actor

57

US seizes 2 domains used by APT29 in recent phishing campaign

Security AffairsJun 2, 07:46 UTC · Jun 2, 2021Threat actor

57

How the Russian hacking group Cozy Bear, suspected in the SolarWinds breach, plays the long game

CyberScoopDec 18, 21:04 UTC · Dec 18, 2020Threat actor

57

Commercial spyware vendor exploits used by Kremlin

Ars Technica · SecurityAug 29, 21:05 UTC · Aug 29, 2024Malware CVE-2023-41993 CVE-2024-5274 CVE-2024-4671+1 CVEs

60

TeamViewer says Russia’s ‘Cozy Bear’ hackers attacked corporate IT system

The RecordJun 28, 18:54 UTC · Jun 28, 2024Threat actor

57

Attribution: A Puzzle

Cisco TalosAug 13, 13:08 UTC · Aug 13, 2020Vulnerability

42

APT29 abused Windows Credential Roaming in attacks

Security AffairsNov 10, 10:41 UTC · Nov 10, 2022Threat actor CVE-2022-30170

60

Russian APT29 relies on Google Drive, Dropbox to evade detection

Security AffairsJul 19, 13:41 UTC · Jul 19, 2022Threat actor

57

Russia-linked APT29 group changes TTPs following April advisories

Security AffairsMay 7, 21:03 UTC · May 7, 2021Threat actor CVE-2021-26855 CVE-2018-13379 CVE-2019-1653+9 CVEs

50

Suspected APT29 hackers behind attacks on US gov agencies

Security AffairsNov 18, 09:35 UTC · Nov 18, 2018Threat actor

45

BlueBravo Uses Ambassador Lure to Deploy GraphicalNeutrino Malware

Recorded FutureAug 21, 00:00 UTC · Aug 21, 2025Malware

42

APT29 Spearphishing Campaign Targets Thousands with RDP Files

Infosecurity MagazineOct 30, 10:00 UTC · Oct 30, 2024Threat actor

57

CISA Warns of Threat Actors Exploiting F5 BIG

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2024Threat actor CVE-2022-27924 CVE-2023-42793

60

Russia-linked group APT29 is targeting Zimbra and JetBrains TeamCity servers on a large scale

Security AffairsOct 13, 04:38 UTC · Oct 13, 2024Threat actor CVE-2022-27924 CVE-2023-42793

60

Russia-linked group APT29 likely breached TeamViewer

Security AffairsJun 30, 12:44 UTC · Jun 30, 2024Data breach

57

Russian APT29 Hackers Use Online Storage Services, DropBox and Google Drive

Palo Alto Unit 42Jun 5, 20:16 UTC · Jun 5, 2024Threat actor

57

APT29 abuses EU information exchange systems in recent attacks

Security AffairsMar 15, 23:28 UTC · Mar 15, 2023Threat actor

57

Russian APT activity is resurgent, researchers say

CyberScoopNov 20, 14:00 UTC · Nov 20, 2018Exploit / PoC in the wild

60