NATO and the EU formally condemned APT28 cyber espionageSecurity Affairs·May 12, 16:39 UTC · May 12, 2024Threat actorCVE-2023-23397CVE-2022-30190CVE-2020-12641+2 CVEs60
Why the DNC hackers will continue to wreak havocCyberScoop·Jan 17, 23:06 UTC · Jan 17, 2017Exploit / PoC in the wild60
The evolutions of APT28 attacks .... ..... .... .... .... .... ....Security Affairs·Dec 5, 06:41 UTC · Dec 5, 2019Threat actorCVE-2017-0144CVE-2013-3897CVE-2014-1776+17 CVEs60
APT28 group return to intelligence ops in Europe and South America.Security Affairs·Oct 7, 14:08 UTC · Oct 7, 2018Threat actor57
APT28 group is rushing to exploit recent CVE-2017-11292 Flash 0Security Affairs·Oct 22, 11:29 UTC · Oct 22, 2017VulnerabilityCVE-2017-11292CVE-2015-7645CVE-2016-1019+2 CVEs60
Cracking APT28 traffic in a few secondsSecurity Affairs·Oct 22, 09:47 UTC · Oct 22, 2017Threat actor57
APT28 exploits Microsoft Office flaw in Operation NeusploitSecurity Affairs·Feb 3, 12:13 UTC · Feb 3, 2026Threat actor in the wildCVE-2026-2150960
France links Russian APT28 to attacks on dozen French entitiesSecurity Affairs·Apr 30, 13:58 UTC · Apr 30, 2025Threat actorCVE-2023-2339760
Russia-linked APT28 compromised Ubiquiti EdgeRouters to facilitate cyber operationsSecurity Affairs·Feb 28, 11:43 UTC · Feb 28, 2024Threat actorCVE-2021-36260CVE-2022-46169CVE-2021-35394+1 CVEs160
US and UK agencies warn of Russia-linked APT28 exploiting Cisco router flawsSecurity Affairs·Apr 19, 13:55 UTC · Apr 19, 2023Threat actorCVE-2017-674260
APT28 hackers are leveraging NSA Hacking tool to spy on Hotels guestsSecurity Affairs·Oct 4, 19:44 UTC · Oct 4, 2017Threat actor57
APT28: FireEye uncovered Russian espionage campaignSecurity Affairs·Feb 16, 11:34 UTC · Feb 16, 2017Threat actor57
Russian APT28 Hackers Hijack Routers to Steal CredentialsInfosecurity Magazine·Apr 7, 15:30 UTC · Apr 7, 2026Threat actorCVE-2023-5022450
Russia-linked APT28 targets government Polish institutionsSecurity Affairs·May 10, 11:07 UTC · May 10, 2024Threat actorCVE-2023-2339760
Russia-Linked APT28 group observed using DDE attack to deliver malwareSecurity Affairs·Nov 9, 06:54 UTC · Nov 9, 2017Malware42
January 2026 CVE Landscape: 23 Critical Vulnerabilities Mark 5% Increase, APT28 Exploits Microsoft Office ZeroRecorded Future·Feb 24, 00:00 UTC · Feb 24, 2026Vulnerability in the wildCVE-2026-21509CVE-2026-23760CVE-2026-1281+1 CVEs160
APT28 targeted Montenegro's government before it joined NATO, researchers sayCyberScoop·Jun 6, 22:12 UTC · Jun 6, 2017Threat actor in the wild60
Russia-linked APT28 group spotted exploiting Outlook flaw to hijack MS Exchange accountsSecurity Affairs·Dec 5, 14:19 UTC · Dec 5, 2023Threat actorCVE-2023-23397CVE-2023-38831CVE-2021-40444+4 CVEs60
Microsoft disrupted APT28 attacks on Ukraine through a court orderSecurity Affairs·Apr 8, 09:44 UTC · Apr 8, 2022Threat actor60
APT28 and Upcoming Elections: evidence of possible interferenceSecurity Affairs·Apr 12, 14:16 UTC · Apr 12, 2019Threat actor57
Microsoft: Russian APT28 group hit Democratic Institutions in EuropeSecurity Affairs·Feb 20, 21:12 UTC · Feb 20, 2019Threat actor45
Google was aware of Russian APT28 group years before othersSecurity Affairs·Aug 20, 17:39 UTC · Aug 20, 2017Threat actor57
Researchers link Macron hack to APT28 with 'moderate confidence'CyberScoop·May 11, 15:01 UTC · May 11, 2017Threat actor in the wild60
Russia-linked APT28 exploited MSHTML zero-day CVE-2026Security Affairs·Mar 2, 14:46 UTC · Mar 2, 2026Exploit / PoCCVE-2026-2151360
Chinese Threat Actor TEMP.Periscope Targets UK-Based Engineering Company Using Russian APT TechniquesRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025Threat actor60
Russian-Related Threats to the 2020 US Presidential ElectionRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025Ransomware57
Russian APT28 Expands Arsenal with ‘NotDoor’ Outlook BackdoorInfosecurity Magazine·Sep 3, 13:45 UTC · Sep 3, 2025Malware42
Running for Office: Russian APT Toolkits RevealedRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025Ransomware in the wildCVE-2014-3897CVE-2013-3897260
Microsoft Outlook Flaw Exploited by Russia's APT28 to Hack Czech, German EntitiesThe Hacker News·May 9, 05:20 UTC · May 9, 2024Threat actorCVE-2023-23397CVE-2022-3802860
APT28 has been scanning vulnerable email servers in the last yearSecurity Affairs·Mar 20, 12:47 UTC · Mar 20, 2020Threat actor60
#APT28 and Upcoming #Elections: evidence of possible interference (Pt II)Security Affairs·Apr 18, 11:08 UTC · Apr 18, 2019Threat actor45
Report: APT28 breached German foreign and defense ministriesCyberScoop·Mar 1, 03:36 UTC · Mar 1, 2018Data breach in the wild60
Russian APT28 group also targeted French Presidential candidate Emmanuel MacronSecurity Affairs·May 6, 08:41 UTC · May 6, 2017Threat actor57
APT28 hacking crew plans attacks on financial institutionsSecurity Affairs·May 15, 22:06 UTC · May 15, 2015Threat actor60
Russian State-Linked APT28 Exploits SOHO Routers in Global DNS Hijacking CampaignThe Hacker News·Apr 8, 16:11 UTC · Apr 8, 2026Threat actorCVE-2023-50224160
APT28 conducts long-term espionage on Ukrainian forces using custom malwareSecurity Affairs·Mar 10, 15:14 UTC · Mar 10, 2026Malware42
APT28 Uses BEARDSHELL and COVENANT Malware to Spy on Ukrainian MilitaryThe Hacker News·Mar 10, 14:28 UTC · Mar 10, 2026Malware42
Russia-linked APT28 used tool GooseEgg for to exploit Win bugSecurity Affairs·Apr 22, 21:03 UTC · Apr 22, 2024Threat actorCVE-2022-3802860
Cybersecurity Agencies Warn Ubiquiti EdgeRouter Users of APT28's MooBot ThreatThe Hacker News·Feb 28, 12:55 UTC · Feb 28, 2024Threat actorCVE-2023-2339760