![We have successfully taken down *[.]frgel.lio
C2 and Phishing domain and subdomains from APT28.
#Anonymous #OpAPT28](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:mxc7liuon6iq5gzapmmwkq22/bafkreifdujyqokhy22yhjv7bzywavl6d5t7kog5gxdurtneax2e5dzmbuq)
Anonymous is currently targeting the Russian state hacking group APT28 (Fancy Bear) this group is responsible for attacks across Ukraine, Europe and the infamous DNC hack. The operation is ongoing. #OpAPT28
May 3, 2025 at 9:17 AM
Anonymous is currently targeting the Russian state hacking group APT28 (Fancy Bear) this group is responsible for attacks across Ukraine, Europe and the infamous DNC hack. The operation is ongoing. #OpAPT28
⚡️ France accuses Russia of escalating cyberattacks since 2021, charges GRU's 'Fancy Bear' unit.
France has brought charges against the GRU's APT28 unit, based in Rostov-on-Don in southern Russia.
France has brought charges against the GRU's APT28 unit, based in Rostov-on-Don in southern Russia.
France accuses Russia of escalating cyberattacks since 2021, charges GRU's 'Fancy Bear' unit
France has brought charges against the GRU's APT28 unit, based in Rostov-on-Don in southern Russia.
kyivindependent.com
April 29, 2025 at 4:12 PM
⚡️ France accuses Russia of escalating cyberattacks since 2021, charges GRU's 'Fancy Bear' unit.
France has brought charges against the GRU's APT28 unit, based in Rostov-on-Don in southern Russia.
France has brought charges against the GRU's APT28 unit, based in Rostov-on-Don in southern Russia.
Completely missed that France has started publicly attributing cyber attacks last week
www.diplomatie.gouv.fr/en/country-f...
www.diplomatie.gouv.fr/en/country-f...
Russia – Attribution of cyber attacks on France to the Russian military intelligence service (APT28) (29.04.25)
France condemns in the strongest terms the use by Russia's military intelligence service (GRU) of the APT28 attack group, at the origin of several (…)
www.diplomatie.gouv.fr
May 9, 2025 at 1:09 PM
Completely missed that France has started publicly attributing cyber attacks last week
www.diplomatie.gouv.fr/en/country-f...
www.diplomatie.gouv.fr/en/country-f...
Attribution de cyberattaques contre la France au service de renseignement militaire russe (APT28) ( 29 avril 2025) par la diplomatie française.
Russie – Attribution de cyberattaques contre la France au service de renseignement militaire russe (APT28) (29.04.25)
La France condamne avec la plus grande fermeté le recours par le service de renseignement militaire russe (GRU) au mode opératoire d'attaque APT28, (…)
www.diplomatie.gouv.fr
April 29, 2025 at 1:37 PM
Attribution de cyberattaques contre la France au service de renseignement militaire russe (APT28) ( 29 avril 2025) par la diplomatie française.
The UK has exposed Russian military intelligence targeting vulnerable routers to support cyber attacks.
A new advisory from the NCSC reveals how state‑linked group APT28 exploited vulnerable edge devices to conduct DNS hijacking operations.
www.ncsc.gov.uk/news/apt28-e...
A new advisory from the NCSC reveals how state‑linked group APT28 exploited vulnerable edge devices to conduct DNS hijacking operations.
www.ncsc.gov.uk/news/apt28-e...
APT28 exploit routers to enable DNS hijacking operations
Russian cyber actor APT28 exploit vulnerable routers to hijack DNS, enabling adversary‑in‑the‑middle attacks and theft of passwords and authentication tokens.
www.ncsc.gov.uk
April 7, 2026 at 2:28 PM
The UK has exposed Russian military intelligence targeting vulnerable routers to support cyber attacks.
A new advisory from the NCSC reveals how state‑linked group APT28 exploited vulnerable edge devices to conduct DNS hijacking operations.
www.ncsc.gov.uk/news/apt28-e...
A new advisory from the NCSC reveals how state‑linked group APT28 exploited vulnerable edge devices to conduct DNS hijacking operations.
www.ncsc.gov.uk/news/apt28-e...
Germany intelligence agency warns of Russian APT28 cyber spying reut.rs/4snDLo2
Germany intelligence agency warns of Russian APT28 cyber spying
Germany’s domestic intelligence agency warned on Tuesday of cyberattacks by the Russian state-linked hacker group APT28, saying it had compromised vulnerable TP-Link internet routers to spy on military, government and critical infrastructure targets.
reut.rs
April 8, 2026 at 3:20 AM
Germany intelligence agency warns of Russian APT28 cyber spying reut.rs/4snDLo2
A group called APT28, of GRU, Russia's military intelligence service, infiltrates France's digital networks to gather intelligence and destabilize society, Foreign Minister Jean-Noël Barrot said.
This has been going on for over a decade.
This has been going on for over a decade.
April 29, 2025 at 4:18 PM
A group called APT28, of GRU, Russia's military intelligence service, infiltrates France's digital networks to gather intelligence and destabilize society, Foreign Minister Jean-Noël Barrot said.
This has been going on for over a decade.
This has been going on for over a decade.
The French foreign ministry blamed the APT28 hacking group linked to russia's military intelligence service (GRU) for targeting or breaching a dozen French entities over the last four years.
www.bleepingcomputer.com/news/securit...
www.bleepingcomputer.com/news/securit...
France ties Russian APT28 hackers to 12 cyberattacks on French orgs
Today, the French foreign ministry blamed the APT28 hacking group linked to Russia's military intelligence service (GRU) for targeting or breaching a dozen French entities over the last four years.
www.bleepingcomputer.com
April 30, 2025 at 3:28 AM
The French foreign ministry blamed the APT28 hacking group linked to russia's military intelligence service (GRU) for targeting or breaching a dozen French entities over the last four years.
www.bleepingcomputer.com/news/securit...
www.bleepingcomputer.com/news/securit...
September 16, 2025 at 4:14 PM
TP-Link Systems Inc., ein in Kalifornien ansässiger Hersteller von WLAN-Routern, liefert neben Netzwerkhardware offenbar auch regelmäßig Sicherheitslücken mit.
Russian State-Linked APT28 Exploits SOHO Routers in Global DNS Hijacking Campaign
APT28 exploits SOHO routers for global DNS hijacking and adversary-in-the-middle attacks, enabling credential theft and espionage.
thehackernews.com
April 7, 2026 at 8:17 PM
TP-Link Systems Inc., ein in Kalifornien ansässiger Hersteller von WLAN-Routern, liefert neben Netzwerkhardware offenbar auch regelmäßig Sicherheitslücken mit.
Russian APT28 Deploys “NotDoor” Backdoor Through Microsoft Outlook hackread.com/russian-apt2...
Russian APT28 Deploys “NotDoor” Backdoor Through Microsoft Outlook
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
hackread.com
September 7, 2025 at 3:42 PM
Russian APT28 Deploys “NotDoor” Backdoor Through Microsoft Outlook hackread.com/russian-apt2...
APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations
APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations
Recorded Future links HOOKEDGE campaigns targeting European government and diplomatic organizations to APT28 with moderate confidence.
thehackernews.com
August 28, 2026 at 8:47 AM
APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations
One of the chapters of the Anonymous activist movement seems to have identified several members of the Russian APT28 (Fancy Bear / Unit 26165 / Unit 74455) group justpaste.it/k3tr1
#OpAPT28 by Anonymous - APT28 - Fancy Bear
Dmitriy Sergeyevich Badin — Officer, Unit 26165 — Involved in DNC hack and WADA intrusion
justpaste.it
May 1, 2025 at 4:41 PM
One of the chapters of the Anonymous activist movement seems to have identified several members of the Russian APT28 (Fancy Bear / Unit 26165 / Unit 74455) group justpaste.it/k3tr1
In a first, Russia's APT28 hacking group appears to have remotely breached the Wi-Fi of an espionage target by hijacking a laptop in another building across the street.
Russian Spies Jumped From One Network to Another Via Wi-Fi in an Unprecedented Hack
In a first, Russia's APT28 hacking group appears to have remotely breached the Wi-Fi of an espionage target by hijacking a laptop in another building across the street.
www.wired.com
November 22, 2024 at 1:44 PM
In a first, Russia's APT28 hacking group appears to have remotely breached the Wi-Fi of an espionage target by hijacking a laptop in another building across the street.
Russian espionage group APT28 compromised MikroTik and TP-Link routers to redirect traffic for certain authentication operations to AitM phishing kits
This botnet was taken down today by the FBI, DOJ, Lumen, and Microsoft
www.lumen.com/blog-and-new...
This botnet was taken down today by the FBI, DOJ, Lumen, and Microsoft
www.lumen.com/blog-and-new...
April 7, 2026 at 4:10 PM
Russian espionage group APT28 compromised MikroTik and TP-Link routers to redirect traffic for certain authentication operations to AitM phishing kits
This botnet was taken down today by the FBI, DOJ, Lumen, and Microsoft
www.lumen.com/blog-and-new...
This botnet was taken down today by the FBI, DOJ, Lumen, and Microsoft
www.lumen.com/blog-and-new...
Cyberattacks against France attributed to Russian military intelligence service (APT28) by the French diplomacy
below the technical report by @cert-fr.bsky.social
www.cert.ssi.gouv.fr/uploads/CERT...
below the technical report by @cert-fr.bsky.social
www.cert.ssi.gouv.fr/uploads/CERT...
April 29, 2025 at 1:38 PM
Cyberattacks against France attributed to Russian military intelligence service (APT28) by the French diplomacy
below the technical report by @cert-fr.bsky.social
www.cert.ssi.gouv.fr/uploads/CERT...
below the technical report by @cert-fr.bsky.social
www.cert.ssi.gouv.fr/uploads/CERT...
Fancy Bear at APT28
www.cisa.gov/news-events/...
www.cisa.gov/news-events/...
APT28 Exploits Known Vulnerability to Carry Out Reconnaissance and Deploy Malware on Cisco Routers | CISA
www.cisa.gov
September 29, 2026 at 5:33 PM
Fancy Bear at APT28
www.cisa.gov/news-events/...
www.cisa.gov/news-events/...
🌍 Pour lutter contre la menace russe #APT28 ciblant les entités occidentales du secteur de la logistique et de l’informatique, l'ANSSI et ses partenaires internationaux co-signent un avis de #cybersécurité.
Plus d'informations sur :
media.defense.gov/2025/May/21/...
Plus d'informations sur :
media.defense.gov/2025/May/21/...
May 21, 2025 at 2:07 PM
🌍 Pour lutter contre la menace russe #APT28 ciblant les entités occidentales du secteur de la logistique et de l’informatique, l'ANSSI et ses partenaires internationaux co-signent un avis de #cybersécurité.
Plus d'informations sur :
media.defense.gov/2025/May/21/...
Plus d'informations sur :
media.defense.gov/2025/May/21/...
Anonymous annonce avoir fait tomber le site du ministère russe de la Défense (auquel sont affiliés le GRU et APT28) à la suite d'une attaque par déni de service distribué (DDoS).
May 1, 2025 at 8:46 AM
Anonymous annonce avoir fait tomber le site du ministère russe de la Défense (auquel sont affiliés le GRU et APT28) à la suite d'une attaque par déni de service distribué (DDoS).
Maverits has released a report on APT28, a Russian state-sponsored cyber espionage group linked to the GRU Military Unit 26165.
The report covers the group's operations since the start of the war in Ukraine.
www.maverits.com/post/apt28-t...
The report covers the group's operations since the start of the war in Ukraine.
www.maverits.com/post/apt28-t...
January 30, 2025 at 9:56 AM
Maverits has released a report on APT28, a Russian state-sponsored cyber espionage group linked to the GRU Military Unit 26165.
The report covers the group's operations since the start of the war in Ukraine.
www.maverits.com/post/apt28-t...
The report covers the group's operations since the start of the war in Ukraine.
www.maverits.com/post/apt28-t...
Russian state-sponsored threat group APT28 (aka Fancy Bear or UAC-0001) has launched a sophisticated espionage campaign targeting European military and government entities.
www.trellix.com/blogs/resear...
www.trellix.com/blogs/resear...
www.trellix.com
February 5, 2026 at 2:11 PM
Russian state-sponsored threat group APT28 (aka Fancy Bear or UAC-0001) has launched a sophisticated espionage campaign targeting European military and government entities.
www.trellix.com/blogs/resear...
www.trellix.com/blogs/resear...
In 2025, let's pledge to stop calling Zebrocy APT28, please?
January 13, 2025 at 10:41 PM
In 2025, let's pledge to stop calling Zebrocy APT28, please?