Vulnerabilities
The initial vulnerability was exploited by Russia-linked APT28 in attacks against Ukraine and EU countries.
Hi, what are you looking for?
SecurityWeek
All posts tagged "APT28"
Malware & Threats
The APT28 threat group exploited vulnerable TP-Link and MikroTik routers to conduct adversary-in-the-middle (AitM) attacks.
Malware & Threats
The attacks targeting Europe were analyzed by Ukraine’s CERT-UA and the cybersecurity company Zscaler.
Malware & Threats
APT28 was seen impersonating popular webmail and VPN services, including Microsoft OWA, Google, and Sophos VPN portals.
Malware & Threats
Russia-linked APT28 deployed new malware against Ukrainian government targets through malicious documents sent via Signal chats.
Malware & Threats
Russian military intelligence hackers intensify targeting of Western logistics and technology companies moving supplies into Ukraine.
Email Security
Russia-linked APT28 has been exploiting mail server vulnerabilities against government and defense entities since September 2023.
Nation-State
France says the Russian state-sponsored group APT28 is responsible for targeting or compromising a dozen French entities.
Mobile & Wireless
Russian cyberspy group APT28 conducted a Nearest Neighbor Attack, where it hacked into the building across the street from the victim for a Wi-Fi...
Nation-State
Russia-linked TAG-110 has targeted over 60 government, human rights, and educational entities in Asia and Europe.
Cyberwarfare
Weakening liberal democracies and weakening the NATO alliance are conjoined in the hybrid war that Russia is conducting against Ukraine.
Malware & Threats
Russia-linked APT28 deploys the GooseEgg post-exploitation tool against numerous US and European organizations.
Malware & Threats
The US government says Russia’s APT28 group compromised Ubiquiti EdgeRouters to run cyberespionage operations worldwide.
Malware & Threats
The US government says it has neutralized a network of hundreds of Ubiquiti Edge OS routers under the control of the Russia's APT28 hackers.
Cyberwarfare
Russian threat actor APT28 has been exploiting a no-interaction Outlook vulnerability in attacks against 14 countries.
Data Breaches
The professional services giant says it contained the incident, remediated its source, and experienced no operational or service delivery impact.
Network Security
Supply Chain Security
Artificial Intelligence
Network Security
Cisco says the threat actor behind the LapDogs campaign has expanded its SOHO router malware toolkit with LongLeash, DogLeash, and JarLeash backdoors.
Email Security
Artificial Intelligence
Artificial Intelligence
