Search: “apt29”

375 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Threat actor 116 Malware 73 Data breach 48 Vulnerability 41 Exploit / PoC 38 Ransomware 37 Phishing & fraud 11 Policy & legal 6 AI safety & security 5 AI research 2 Advisory 1

SeverityAll critical 138 high 179 medium 44 low 15 info 2

Russian APT activity is resurgent, researchers say

CyberScoopNov 20, 14:00 UTC · Nov 20, 2018Exploit / PoC in the wild

60

Running for Office: Russian APT Toolkits Revealed

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Ransomware in the wildCVE-2014-3897 CVE-2013-38972

60

Russian APT29 Exploits Gmail App Passwords to Bypass 2FA in Targeted Phishing Campaign

The Hacker NewsJun 19, 08:14 UTC · Jun 19, 2025Threat actor

45

APT29 Deploys GRAPELOADER Malware Targeting European Diplomats Through Wine

The Hacker NewsApr 20, 04:58 UTC · Apr 20, 2025Malware

55

Google says Russian group targeted Mongolian government with exploits used by NSO Group

The RecordAug 29, 15:07 UTC · Aug 29, 2024Vulnerability CVE-2023-41993 CVE-2024-5274 CVE-2024-4671+1 CVEs

47

Microsoft Warns of Widening APT29 Espionage Attacks Targeting Global Orgs

The Hacker NewsJan 27, 06:01 UTC · Jan 27, 2024Threat actor

57

Russia’s APT29 Targets Embassies With Ngrok and WinRAR Exploit

Infosecurity MagazineNov 20, 10:00 UTC · Nov 20, 2023Threat actor CVE-2023-3883

60

Additional Entities Targeted by DarkSide Affiliate, TAG-21; Links to WellMess and Sliver Infrastructure

Recorded FutureJul 15, 00:00 UTC · Jul 15, 2025Ransomware

57

APT29 Hackers Target High-Value Victims Using Rogue RDP Servers and PyRDP

The Hacker NewsDec 19, 06:09 UTC · Dec 19, 2024Threat actor

45

CERT-UA Identifies Malicious RDP Files in Latest Attack on Ukrainian Entities

The Hacker NewsNov 1, 03:36 UTC · Nov 1, 2024Exploit / PoC

60

Kremlin-linked hackers target Ukraine’s state, military agencies in new espionage campaign

The RecordOct 25, 16:23 UTC · Oct 25, 2024Threat actor

45

TeamViewer Detects Security Breach in Corporate IT Environment

The Hacker NewsJul 7, 16:52 UTC · Jul 7, 2024Threat actor in the wild

60

Five Eyes Agencies Expose APT29's Evolving Cloud Attack Tactics

The Hacker NewsFeb 28, 03:29 UTC · Feb 28, 2024Threat actor

57

CISA Issues Alert on APT29’s Cloud Infiltration Tactics

Infosecurity MagazineFeb 26, 17:15 UTC · Feb 26, 2024Threat actor

57

Russian SVR-Linked APT29 Targets JetBrains TeamCity Servers in Ongoing Attacks

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2023Threat actor in the wildCVE-2023-42793

60

CISA, FBI, NSA reveal five enterprise bugs exploited by Russia's APT29 group

The RecordJan 26, 00:00 UTC · Jan 26, 2023Threat actor CVE-2018-13379 CVE-2019-9670 CVE-2019-11510+2 CVEs

60

MITRE asks vendors to do more to detect stealthy hacks

CyberScoopMay 1, 20:31 UTC · May 1, 2019Exploit / PoC in the wild

60

Russian-Related Threats to the 2020 US Presidential Election

Recorded FutureNov 21, 00:00 UTC · Nov 21, 2025Ransomware

57

TeamViewer: Hackers copied employee directory data and encrypted passwords

The RecordJul 1, 19:19 UTC · Jul 1, 2024Threat actor

45

When Pentest Tools Go Brutal: Red-Teaming Tool Being Abused by Malicious Actors

Palo Alto Unit 42Jun 5, 20:22 UTC · Jun 5, 2024AI safety & security

30

Russian Hackers Use 'WINELOADER' Malware to Target German Political Parties

The Hacker NewsMar 23, 06:03 UTC · Mar 23, 2024Malware

42

Cyber-espionage operation on embassies linked to Russia’s Cozy Bear hackers

The RecordNov 14, 16:45 UTC · Nov 14, 2023Threat actor CVE-2023-38831

60

PDF lures aimed at NATO countries contain a Russian clue

The RecordAug 15, 20:07 UTC · Aug 15, 2023Malware

55

SVR cyberspies used iOS zero

The RecordDec 12, 00:00 UTC · Dec 12, 2022Data breach CVE-2021-1879

60

Russian Hackers Targeting Diplomatic Entities in Europe, Americas, and Asia

The Hacker NewsMay 11, 02:46 UTC · May 11, 2022Data breach

57

Experts Uncover Several C&C Servers Linked to WellMess Malware

The Hacker NewsJul 30, 10:00 UTC · Jul 30, 2021Malware

42

Russian government hackers targeting coronavirus vaccine research, UK, US and Canada warn

CyberScoopJul 16, 15:47 UTC · Jul 16, 2020Ransomware in the wild

60

Enriching User Behavior Analytics With Threat Intelligence

Recorded FutureJun 24, 00:00 UTC · Jun 24, 2026Exploit / PoC

60

Russian hackers using red team tools for large

The RecordDec 18, 20:31 UTC · Dec 18, 2024AI safety & security1

30

German political party targeted by SVR-linked group in spearphishing campaign, Mandiant says

CyberScoopMar 22, 17:52 UTC · Mar 22, 2024Threat actor in the wild

60

Five Eyes nations warn of evolving Russian cyberespionage practices targeting cloud environments

CyberScoopFeb 26, 17:18 UTC · Feb 26, 2024Threat actor in the wild

60

HPE Says SolarWinds Hackers Accessed its Emails

Infosecurity MagazineJan 25, 09:30 UTC · Jan 25, 2024Threat actor

45

Pro-Russian Hackers Exploiting Recent WinRAR Vulnerability in New Campaign

The Hacker NewsNov 18, 05:56 UTC · Nov 18, 2023Vulnerability CVE-2023-38831

60

Russian Hackers Use Zulip Chat App for Covert C&C in Diplomatic Phishing Attacks

The Hacker NewsAug 18, 03:58 UTC · Aug 18, 2023Phishing & fraud

55

Microsoft Uncovers New Post-Compromise Malware Used by Nobelium Hackers

The Hacker NewsAug 30, 03:22 UTC · Aug 30, 2022Malware

42

How attackers use and abuse Microsoft MFA

Help Net SecurityAug 24, 00:00 UTC · Aug 24, 2022Data breach

45

Russian hacking unit Cozy Bear adds Google Drive to its arsenal, researchers say

CyberScoopJul 19, 10:00 UTC · Jul 19, 2022Threat actor in the wild

60

Evidence suggests Russia's SVR is still using 'WellMess' malware, despite US warnings

CyberScoopJul 30, 14:19 UTC · Jul 30, 2021Malware in the wild

60

Researchers Find Additional Infrastructure Used By SolarWinds Hackers

The Hacker NewsApr 22, 16:39 UTC · Apr 22, 2021Malware

42

Russian APT Crew Actively Targets COVID19 Vaccine Developers

Infosecurity MagazineJul 16, 15:46 UTC · Jul 16, 2020Vulnerability

55