Threat Actor
Cyber Berkut
- First Reported
- Jun 11, 2026
- Latest Reported
- Jun 11, 2026
Reported Context (1)
- Persona used from March 2014 for DDoS, doxing, and document leaks against Ukrainian government, NATO, and German targets; the UK Foreign and Commonwealth Office and NCSC listed it as a GRU known front. APT28’s Tradecraft Evolves from X-Agent to LLM-Driven Malware
CVE (2)
Malware (16)
People (1)
Threat Actors (34)
Vendors (1)
Products (18)
Tools (4)
Industries (8)
Countries (9)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.