LameHug Malware Dissection

LameHug Malware Dissection

Executive Summary LameHug is a new, AI-powered malware family attributed to the Russian threat actor APT28. It marks a significant evolution in cyber tradecraft by incorporating LLMs (Large Language Models)…
Russian APT28 Hits Ukrainian Power Utilities

Russian APT28 Hits Ukrainian Power Utilities

Ukraine’s CERT-UA has issued a warning about a cyber-attack orchestrated by the notorious Russian threat actor APT28. Targeting a critical power infrastructure facility in Ukraine. CERT-UA detected the attempted breach…
APT 28 Uses Fake Windows Updates

APT 28 Uses Fake Windows Updates

Researchers have reported that the Russia-linked APT28 group is targeting Ukrainian government bodies with fake ‘Windows Update’ guides CERT-UA warns. The APT28 group (aka Fancy Bear) has been active since…
Russian APT 28 Havoc on Cisco Routers

Russian APT 28 Havoc on Cisco Routers

National security agencies from  U.S. and U.K. published an Advisory on the TTPs associated with APT28’s exploitation of Cisco routers using CVE-2017-6742. APT28 is almost certainly a Russian source and…