CERTFR-2025-CTI-007.pdf
Excerpt
Date: April 29, 2025
Version: 1
Number of pages: 7
TARGETING AND COMPRO-
MISE OF FRENCH ENTITIES
USING THE APT28 INTRUSION
SET
ACTIVITIES ASSOCIATED WITH APT28
SINCE 2021
TLP:CLEAR
1
Context
ANSSI, alongside its partners at the Cyber Crisis Coordination Centre (C4), has observed the targeting and compromise of French entities by the APT28 intrusion set. Since 2021, this intrusion set has been used to gather strategic intelligence from entities located in France, Europe, Ukraine, andNorthAmerica. In the context of the war of aggression started by Russia against Ukraine on the 24th of February 2022, espionage campaigns associated with the APT28 intrusion set and targetingUkraine, North Atlantic Treaty Organisation countries, or European Union member states have been observed.
The APT…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by ANSSI (CERT-FR) on cert.ssi.gouv.fr.
Mentioned in the excerpt
More from ANSSI (CERT-FR)12
- 🇬🇧 Houken seeking a path by living on the edge with zero-daysANSSI (CERT-FR) · Added 18 Oct
- CERTFR-2019-CTI-006.pdfANSSI (CERT-FR) · Added 26 Feb
- CERTFR-2019-CTI-006-EN.pdfANSSI (CERT-FR) · Added 26 Feb
- CERTFR-2022-CTI-006.pdfANSSI (CERT-FR) · Added 26 Feb
On the same topics
- Retrohunting APT37: North Korean APT used VBA self decode technique to inject RokRatMalwarebytes · Published 5 Jan 2021
- Kazuar (Malware Family)Malpedia · Added 18 Oct
- Chinese Nation-State Hackers Target U.S in Operation TradeSecret, Report Claimseweek.com · Published 6 Apr 2017
- Taiwan High-Tech Ecosystem Targeted by Foreign APT Group:Medium · Published 10 Jun 2022
