APT28
IRON TWILIGHTSNAKEMACKERELSwallowtailGroup 74SednitSofacyPawn StormFancy BearSTRONTIUMTsar TeamThreat Group-4127TG-4127Forest BlizzardFROZENLAKEGruesomeLarch
RussiaGRU Unit 26165 (Russian military intelligence)
APT28 is a threat group that has been attributed to Russia's General Staff Main Intelligence Directorate (GRU) 85th Main Special Service Center (GTsSS) military unit 26165. This group has been active since at least 2004.
MITRE ATT&CK Techniques
T1001.001T1003T1003.001T1003.003T1005T1014T1021.002T1025T1027.013T1030T1036T1036.005T1037.001T1039T1040T1048.002T1056.001T1057T1059.001T1059.003T1068T1070.004T1070.006T1071.001T1071.003T1074.001T1074.002T1078T1078.004T1083T1090.002T1090.003T1091T1092T1098.002T1102.002T1105T1110T1110.001T1110.003T1113T1114.002T1119T1120T1133T1134.001T1137.002T1140T1189T1190T1199T1203T1204.001T1204.002T1210T1211T1213T1213.002T1218.011T1221T1498T1505.003T1528T1542.003T1546.015T1547.001T1550.001T1550.002T1557.004T1559.002T1560T1560.001T1564.001T1564.003T1566.001T1567T1573.001T1583.001T1583.003T1583.006T1584.008T1586.002T1588.002T1588.007T1589.001T1591T1595.002T1596T1598T1598.003T1669T1684.001T1685.005
Associated Malware
ADVSTORESHELLCHOPSTICKCORESHELLCannonDealersChoiceDowndelphDrovorubForfilesFysbisHIDEDRVJHUHUGITKoadicKomplexLAMEHUGLoJaxMimikatzNetOLDBAITResponderTorUSBStealerWevtutilWinexeXAgentOSXXTunnelZebrocycertutilcipher.exereGeorg
- CriticalRansomwareAPTIn Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS RansomwareSecurityWeek · 2d ago