Search: “APT29”

176 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Threat actor 116 Malware 73 Data breach 48 Vulnerability 41 Exploit / PoC 38 Ransomware 37 Phishing & fraud 11 Policy & legal 6 AI safety & security 5 AI research 2 Advisory 1

SeverityAll critical 138 high 179 medium 44 low 15 info 2

Russian APT29 Group Targets German Politicians

Infosecurity MagazineMar 25, 09:30 UTC · Mar 25, 2024Threat actor

57

Russia-linked APT29 reused iOS and Chrome exploits previously developed by NSO Group and Intellexa

Security AffairsAug 30, 05:33 UTC · Aug 30, 2024Threat actor in the wildCVE-2023-41993 CVE-2024-5274 CVE-2024-4671+1 CVEs

60

Russia-linked APT29 targets diplomatic and government organizations

Security AffairsMay 2, 05:34 UTC · May 2, 2022Threat actor

57

APT29 hit German political parties with bogus invites and malware

Help Net SecurityMar 25, 00:00 UTC · Mar 25, 2024Malware

42

APT29 revamps its techniques to breach cloud environments

Help Net SecurityFeb 27, 00:00 UTC · Feb 27, 2024Threat actor

57

APT29 is targeting Ministries of Foreign Affairs of NATO

Security AffairsAug 17, 23:26 UTC · Aug 17, 2023Threat actor

57

APT29 Exploited a Windows Feature to Compromise European Diplomatic Entity Network

The Hacker NewsNov 11, 11:51 UTC · Nov 11, 2022Threat actor CVE-2022-30170

60

Cybaze ZLab - Yoroi team analyzed malware used in recent APT29 attacks

Security AffairsNov 19, 13:49 UTC · Nov 19, 2018Malware

42

Russia-linked APT29 targets European diplomatic entities with GRAPELOADER

Security AffairsApr 21, 08:12 UTC · Apr 21, 2025Malware

42

Russia-linked APT29 switched to targeting cloud services

Security AffairsJun 30, 12:31 UTC · Jun 30, 2024Threat actor

57

Russia-linked APT29 targeted German political parties with WINELOADER backdoor

Security AffairsMar 23, 18:21 UTC · Mar 23, 2024Malware

42

Russia-linked APT29 is behind recent attacks targeting NATO and EU

Security AffairsApr 13, 20:19 UTC · Apr 13, 2023Threat actor

57

US seizes 2 domains used by APT29 in recent phishing campaign

Security AffairsJun 2, 07:46 UTC · Jun 2, 2021Threat actor

57

How the Russian hacking group Cozy Bear, suspected in the SolarWinds breach, plays the long game

CyberScoopDec 18, 21:04 UTC · Dec 18, 2020Threat actor

57

TeamViewer says Russia’s ‘Cozy Bear’ hackers attacked corporate IT system

The RecordJun 28, 18:54 UTC · Jun 28, 2024Threat actor

57

Attribution: A Puzzle

Cisco TalosAug 13, 13:08 UTC · Aug 13, 2020Vulnerability

42

APT29 abused Windows Credential Roaming in attacks

Security AffairsNov 10, 10:41 UTC · Nov 10, 2022Threat actor CVE-2022-30170

60

Russian APT29 relies on Google Drive, Dropbox to evade detection

Security AffairsJul 19, 13:41 UTC · Jul 19, 2022Threat actor

57

BlueBravo Uses Ambassador Lure to Deploy GraphicalNeutrino Malware

Recorded FutureAug 21, 00:00 UTC · Aug 21, 2025Malware

42

APT29 Spearphishing Campaign Targets Thousands with RDP Files

Infosecurity MagazineOct 30, 10:00 UTC · Oct 30, 2024Threat actor

57

Russia-linked group APT29 is targeting Zimbra and JetBrains TeamCity servers on a large scale

Security AffairsOct 13, 04:38 UTC · Oct 13, 2024Threat actor CVE-2022-27924 CVE-2023-42793

60

Russia-linked group APT29 likely breached TeamViewer

Security AffairsJun 30, 12:44 UTC · Jun 30, 2024Data breach

57

Russian APT29 Hackers Use Online Storage Services, DropBox and Google Drive

Palo Alto Unit 42Jun 5, 20:16 UTC · Jun 5, 2024Threat actor

57

APT29 abuses EU information exchange systems in recent attacks

Security AffairsMar 15, 23:28 UTC · Mar 15, 2023Threat actor

57

Running for Office: Russian APT Toolkits Revealed

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Ransomware in the wildCVE-2014-3897 CVE-2013-38972

60

Google says Russian group targeted Mongolian government with exploits used by NSO Group

The RecordAug 29, 15:07 UTC · Aug 29, 2024Vulnerability CVE-2023-41993 CVE-2024-5274 CVE-2024-4671+1 CVEs

47

Microsoft Warns of Widening APT29 Espionage Attacks Targeting Global Orgs

The Hacker NewsJan 27, 06:01 UTC · Jan 27, 2024Threat actor

57

Additional Entities Targeted by DarkSide Affiliate, TAG-21; Links to WellMess and Sliver Infrastructure

Recorded FutureJul 15, 00:00 UTC · Jul 15, 2025Ransomware

57

TeamViewer Detects Security Breach in Corporate IT Environment

The Hacker NewsJul 7, 16:52 UTC · Jul 7, 2024Threat actor in the wild

60

Five Eyes Agencies Expose APT29's Evolving Cloud Attack Tactics

The Hacker NewsFeb 28, 03:29 UTC · Feb 28, 2024Threat actor

57

CISA Issues Alert on APT29’s Cloud Infiltration Tactics

Infosecurity MagazineFeb 26, 17:15 UTC · Feb 26, 2024Threat actor

57

CISA, FBI, NSA reveal five enterprise bugs exploited by Russia's APT29 group

The RecordJan 26, 00:00 UTC · Jan 26, 2023Threat actor CVE-2018-13379 CVE-2019-9670 CVE-2019-11510+2 CVEs

60

Russian-Related Threats to the 2020 US Presidential Election

Recorded FutureNov 21, 00:00 UTC · Nov 21, 2025Ransomware

57

Russian Hackers Use 'WINELOADER' Malware to Target German Political Parties

The Hacker NewsMar 23, 06:03 UTC · Mar 23, 2024Malware

42

Cyber-espionage operation on embassies linked to Russia’s Cozy Bear hackers

The RecordNov 14, 16:45 UTC · Nov 14, 2023Threat actor CVE-2023-38831

60

Russian Hackers Targeting Diplomatic Entities in Europe, Americas, and Asia

The Hacker NewsMay 11, 02:46 UTC · May 11, 2022Data breach

57

Experts Uncover Several C&C Servers Linked to WellMess Malware

The Hacker NewsJul 30, 10:00 UTC · Jul 30, 2021Malware

42

Microsoft Uncovers New Post-Compromise Malware Used by Nobelium Hackers

The Hacker NewsAug 30, 03:22 UTC · Aug 30, 2022Malware

42

Researchers Find Additional Infrastructure Used By SolarWinds Hackers

The Hacker NewsApr 22, 16:39 UTC · Apr 22, 2021Malware

42

Exclusive - Hunting Cozy Bear, new campaign, old habits

Security AffairsNov 23, 10:38 UTC · Nov 23, 2018Threat actor

57