Skip to content

CyberSIXT Search

Threat actor · coverage timeline

APT28

29 articles from 13 outlets between 7 Apr and 22 Oct. First reported by NCSC. The busiest day was Wed 8 Apr, with 7 articles.

Articles: 29; all time · from 13 outlets
Days with coverage: 17; across 199 days
Busiest day: 7; articles on Wed 8 Apr
Last 7 days: 0.3a day; vs 0.1 a day before
First report: 7 Apr; NCSC
CVEs named: 9; 7 in CISA KEV · in these articles

Coverage over time

29 articles · 7 Apr – 22 Oct

7 AprFirst report7 Apr · NCSC

Show as table

APT28: articles per day
Day (UTC)	Articles	Outlets
Tue 7 Apr	5	NCSC 2, Microsoft 1, Infosecurity 1, The Hacker News 1
Wed 8 Apr	7	Infosecurity 1, SecurityWeek 1, Ars Technica 1, DataBreaches 1, Malwarebytes 1, The Hacker News 1, Security Affairs 1
Thu 9 Apr	2	Dark Reading 2
Sun 12 Apr	1	Security Affairs 1
Mon 13 Apr	1	The Hacker News 1
Mon 27 Apr	1	SecurityWeek 1
Tue 28 Apr	1	The Hacker News 1
Wed 29 Apr	1	The Hacker News 1
Mon 4 May	1	SOCRadar 1
Fri 8 May	1	Security Affairs 1
Mon 8 Jun	1	SecurityOnline 1
Tue 16 Jun	1	dti.domaintools.com 1
Mon 27 Jul	1	SecurityWeek 1
Thu 27 Aug	1	dti.domaintools.com 1
Fri 28 Aug	2	The Hacker News 1, Security Affairs 1
Tue 20 Oct	1	The Hacker News 1
Thu 22 Oct	1	SecurityOnline 1

Articles

29 articles

Thu 22 Oct1 article

09:22
Fancy Bear Used Webhook.site to Breach European Defence TargetsSecurityOnline

Tue 20 Oct1 article

12:31
APT28 Breaches NATO Naval Shipbuilder and Steals Credentials in Week-Long IntrusionThe Hacker News

Fri 28 Aug2 articles

12:29
BlueDelta APT deploys HOOKEDGE backdoor via malicious Word macrosSecurity Affairs
09:06
APT28 Uses HOOKEDGE Backdoor to Spy on European Govt NetworksThe Hacker News

Thu 27 Aug1 article

20:46
Leak shows Moscow university training cyber troops for Russiadti.domaintools.com

Mon 27 Jul1 article

11:21
WiFi attacks steal Microsoft 365 logins via DNS spoofingSecurityWeek

Tue 16 Jun1 article

21:31
GRU hackers use compromised routers to spy on UK officialsdti.domaintools.com

Mon 8 Jun1 article

08:59
APT28’s PixyNetLoader uses PNG steganography to hide malwareSecurityOnline

Fri 8 May1 article

19:31
Polish water plants breached by Russian APT via weak passwordsSecurity Affairs

Mon 4 May1 article

15:31
AI Powered Scams Rise as Deepfake Calls Cost Firms MillionsSOCRadar

Wed 29 Apr1 article

09:11
CISA Flags Actively Exploited CVE-2024-1708 and Windows FlawThe Hacker News

Tue 28 Apr1 article

07:21
Microsoft Warns of Active Exploit in CVE-2026-32202 Spoof FlawThe Hacker News

Mon 27 Apr1 article

13:41
APT28 exploits Windows SmartScreen gap for zero click LNK attacksSecurityWeek

Mon 13 Apr1 article

14:32
RegPhantom Rootkit Lets Attackers Gain Kernel Access on WindowsThe Hacker News

Sun 12 Apr1 article

13:11
Malicious npm Strapi Packages Spread Redis RCE and Steal DataSecurity Affairs

Thu 9 Apr2 articles

21:31
Trend Micro Exposes Fancy Bears Prismex Malware Targeting UkraineDark Reading
01:31
APT28's Year Long Router Hijacking Campaign Exposes World TrafficDark Reading

Wed 8 Apr7 articles

21:11
Russia-linked APT28 uses PRISMEX to infiltrate Ukraine and allied infrastructure with advanced tacticsSecurity Affairs
16:11
APT28 Deploys New PRISMEX Malware Against Ukraine and NATO AlliesThe Hacker News
13:51
UK warns Russian hackers hijack home routers for spyingMalwarebytes
12:41
APT28 hijacks routers worldwide to steal passwords via DNS attackDataBreaches
11:31
Russian APT28 hijacks home routers to steal credentialsArs Technica
11:00
US Disrupts Russian Espionage Operation Involving Hacked Routers and DNS HijackingSecurityWeek
10:30
US and FBI shut down Russian hackers' router hijacking networkInfosecurity

Tue 7 Apr5 articles

18:11
APT28 hijacks routers worldwide in DNS based FrostArmada campaignThe Hacker News
16:01
APT28 exploits SOHO routers via CVE‑2023‑50224 to steal credentialsInfosecurity
15:27
Forest Blizzard hijacks routers to spy via AI enabled DNS attacksMicrosoft
13:31
NCSC Warns Russian APT28 Hijacks Routers for DNS AttacksNCSC · official notice
13:30
APT28 exploits routers to redirect DNS, stealing credentialsNCSC · first report · official notice