Russia-Linked APT28 Exploited MDaemon Zero-Day to Hack Government Webmail Servers
APT28, a Russian-linked cyber threat actor, is conducting espionage targeting webmail servers through XSS vulnerabilities aimed at stealing confidential data.
Russia-Linked APT28 Exploited MDaemon Zero-Day to Hack Government Webmail Servers
APT28, a Russian-linked cyber threat actor, is conducting espionage targeting webmail servers through XSS vulnerabilities aimed at stealing confidential data.
CERT-UA Discovers LAMEHUG Malware Linked to APT28, Using LLM for Phishing Campaign
LAMEHUG is a malware that uses large language models to generate executable commands based on text descriptions, targeting executive government authorities through phishing emails.
APT28 Targets Diplomats with HeadLace Malware via Car Sale Phishing Lure
The campaign targeted diplomats with a car-for-sale phishing lure delivering the HeadLace backdoor, attributed to APT28, known by various aliases, reusing tactics from APT29.