Dec 10, 2025 ·
https://www.picussecurity.com/resource/blog/apt28-cyber-threat-profile-and-detailed-ttps
Dec 10, 2025 · Explore APT28 's history, major campaigns, and MITRE ATT&CK TTPs. Learn how to simulate and defend against this threat with Picus.
Search Articles — Sudonull
Search Results
From the web
Apr 18, 2023 ·
https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-108
Apr 18, 2023 · APT28 has been known to access vulnerable routers by using default and weak SNMP community strings, and by exploiting CVE-2017-6742 (Cisco Bug ID: CSCve54313) as published by Cisco.
Apr 7, 2026 ·
https://thehackernews.com/2026/04/russian-state-linked-apt28-exploits.html
Apr 7, 2026 · APT28 exploits SOHO routers for global DNS hijacking and adversary-in-the-middle attacks, enabling credential theft and espionage.
Mar 2, 2026 ·
https://thehackernews.com/2026/03/apt28-tied-to-cve-2026-21513-mshtml-0.html
Mar 2, 2026 · APT28 exploited CVE-2026-21513, an MSHTML zero-day (CVSS 8.8), using malicious LNK files to bypass security controls and execute code.
Alert: I-260407-PSA | 07 APRIL 2026 Russian GRU Exploiting...
https://media.defense.gov/2026/Apr/07/2003907743/-1/-1/0/I-260407-PSA.PDF
Apr 7, 2026 · UNDERSTANDING THE DNS HIJACKING OPERATIONS Since at least 2024, Russian GRU 85th Main Special Service Center (85th GTsSS) cyber actors – also known as APT28 , Fancy Bear, and Forest Blizzard – have been collecting credentials and exploiting vulnerable routers worldwide, including compromising TP-Link routers using CVE-2023-50224. The GRU actors changed the devices’ dynamic host ...
Apr 7, 2026 ·
https://www.ncsc.gov.uk/news/apt28-exploit-routers-to-enable-dns-hijacking-operations
Apr 7, 2026 · Russian cyber actor APT28 exploit vulnerable routers to hijack DNS, enabling adversary‑in‑the‑middle attacks and theft of passwords and authentication tokens.
Feb 2, 2026 ·
https://www.zscaler.com/blogs/security-research/apt28-leverages-cve-2026-21509-operation-neusploit
Feb 2, 2026 · Zscaler ThreatLabz uncovers APT28 's Operation Neusploit, RTF-based CVE-2026-21509 exploits targeting Central and Eastern Europe.
Feb 4, 2026 ·
https://www.trellix.com/blogs/research/apt28-stealthy-campaign-leveraging-cve-2026-21509-cloud-c2/
Feb 4, 2026 · Russian state-sponsored threat group APT28 (aka Fancy Bear or UAC-0001) has launched a sophisticated espionage campaign targeting European military and government entities, specifically targeting maritime and transport organizations across Poland, Slovenia, Turkey, Greece, the UAE, and Ukraine.
Trending Now
What Are the Ethical Concerns in Artificial Intelligence?
Learn what are the ethical concerns in artificial intelligence, from bias to job loss. Backed by research, this guide offers a practical framework for evaluation.
How to Monitor Kubernetes with Grafana and Prometheus
Learn how to monitor Kubernetes with Grafana and Prometheus using the kube-prometheus-stack. Step-by-step guide to deploy, connect, and visualize cluster metrics.
MongoDB vs PostgreSQL When to Use Each: Key Differences
MongoDB vs PostgreSQL when to use each: compare ACID compliance, scalability, schema flexibility, and query power. Choose the right database for your project.
How to Learn Python for Beginners: Step-by-Step Roadmap
Discover how to learn Python for beginners with this step-by-step roadmap. Master fundamentals, data structures, and build real projects. Start your coding journey today.
How to Implement JWT Authentication: Step-by-Step Guide
Learn how to implement JWT authentication securely in your web API. This complete guide covers token issuance, validation, best practices, and production security.
JavaScript vs Python Which Is Better: Full 2026 Guide
JavaScript vs Python which is better for you? Compare ease of learning, salaries, use cases, and career paths to choose the right first language in 2026. Start now.
Semiconductor Industry History & How It Works
Explore the history of the semiconductor industry and how does it work. Learn chip design, fabrication, and the global impact of this vital technology. Discover more.
Nvidia capitalization $5.4 trillion: surpassed Europe
Nvidia reached $5.4 trillion capitalization, outpacing the 10 largest companies in Europe. Analysis of growth reasons, overheating risks, and forecasts for the AI chip market. Read the review.
What Is MLOps and Why Is It Important? Key Concepts
Learn what is MLOps and why it is important for AI success. Discover key concepts, benefits, and how it bridges data science and operations for scalable ML.
Google Gemini Ultra 2.0: record performance and price
Google introduced Gemini Ultra 2.0 with a context of up to 10 million tokens, surpassing GPT-5. Learn about the breakthrough architecture, price of $0.0005, and impact on the AI market. Read the full analysis.