Incidents
APT28
Review stories that name this actor, with reporting mentions kept distinct from attribution of an operation.
News reporting onlyThis profile is assembled only from stories in this tracker’s reporting corpus. A mention measures this tracker’s coverage and is not attribution of an operation.
Named in 6 stories by this tracker. Population: 256 news stories with stored actor tags in this tracker corpus.
Catalogued identity
These references are curated crosswalk entries, not claims made by any feed. They describe the group, not the stories above.
MITRE catalogues 93 techniques for this group.
MITRE ATT&CK names and links © The MITRE Corporation.
Stories that name this actor
- Leaked Russian Cyber-Operations Training Materials
- APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations
- BlueDelta Targets Defense and Diplomacy with HOOKEDGE
- DNS Poisoning Tactics Expand to Hospitality Wi-Fi
- APT28 Leverages CVE-2026-21509 in Operation Neusploit
- The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access