Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new campaign involving a malicious program disguised as a Notepad++…
Tag: APT28
Seqrite: Cybersecurity Company
Seqrite, a cybersecurity firm, analyzed a January 2026 incident at a Ukrainian state hydrology agency involving the Zimbra zero-day. It attributed the…
Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes
A Russian state-sponsored espionage group exploited a zero-day vulnerability in Zimbra's webmail client to steal emails, passwords, and two-factor authentication recovery codes…
Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery
Security researcher Bert-Jan Pals analyzed roughly 3,000 live ClickFix payloads and presented findings at OrangeCon in early June, publishing details on June…
Canada’s Spy Agency Uses First-of-Its-Kind Warrant to Clean Botnet-Infected Devices
Canada's spy service, the Canadian Security Intelligence Service (CSIS), obtained a judge's permission to remotely clean botnet-infected devices on Canadian soil, marking…
APT28 — Attack group profile
APT28 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Ubiquiti Router
Ubiquiti routers are used in enterprise and home networks. They were targeted by APT28 for espionage relay operations.
APT28
[APT28](https://attack.mitre.org/groups/G0007) is a threat group that has been attributed to Russia's General Staff Main Intelligence Directorate (GRU) 85th Main Special Service Center…