APT28

Reported Context (49)

Symantec linked APT28 to Hookedge backdoor attacks against organizations in two NATO member states. Weekly Security Roundup Covers Hijacked Tor Relays, AI Agents and Data Breaches
Symantec researchers reportedly linked this Russian-linked group to attacks against law enforcement and defense-related organizations in two NATO member states; the briefing also identifies the tracking name Swallowtail. Cyber Brief: APT28 Targets NATO Suppliers as Ransomware Groups Exploit PAN-OS
The report attributes LAMEHUG to this group and identifies Fancy Bear and Sofacy as alternate names. Cisco’s 2026 AI Security Report Highlights Agentic and Supply Chain Risks
Russia-nexus intrusion set targeting EU public administration, particularly central governments, and defence-related manufacturing. ENISA Threat Landscape 2026: DDoS Dominates Recorded EU Cyber Incidents
Identified in the report as APT28. CERT-UA attributed LameHug to it with moderate confidence; the report also attributes PROMPTSTEAL to it. Sophos AI Security Report 2026: AI Accelerates Attacks and Expands Enterprise Exposure

CVE (71)

Malware (136)

People (42)

Threat Actors (185)

MITRE ATT&CK (139)

Vendors (90)

Products (152)

Tools (80)

Industries (65)

Countries (64)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.