A campaign launched by APT28, attributed to the Russian GRU, targets Western logistics and technology firms, especially those involved in aid to Ukraine. The joint advisory highlights a mix of tactics like password spraying and spear-phishing aimed at NATO countries and Ukraine. The cyber threat stems from an ongoing series of escalated attacks linked to APT28, which have been reported since 2021, particularly against entities critical for national defense and stability, as outlined by multiple international agencies.
"This cyber espionage-oriented campaign targeting logistics entities and technology companies uses a mix of previously disclosed TTPs and is likely connected to these actors' wide scale targeting of IP cameras in Ukraine and bordering NATO nations."
"The alert comes weeks after France's foreign ministry accused APT28 of mounting cyber attacks on a dozen entities including ministries, defense firms, research entities, and think tanks since 2021 in an attempt to destabilize the nation."
Collection
[
|
...
]