Threats & Adversaries · APT / Espionage
Russian GRU APT Resurfaces Using Cloud-based Espionage Toolkit Sednit (Unit 26165/GRU) resumed espionage against Ukrainian military and government targets. ESET links deployments since April 2024 of SlimAgent, BeardShell and a reworked Covenant using legitimate cloud services for C2. The paired implants enable sustained surveillance and operational resilience.
3 sources · Mar 10
Timeline Sources Mar 10 Dark Reading
Russian Threat Actor Sednit Resurfaces With Sophisticated Toolkit
After several years of using simple implants, the Russia-affiliated threat actor is back with two new sophisticated malware tools.
original Mar 10 Help Net Security
This spy tool has been quietly stealing data for years - Help Net Security
ESET researchers uncover the Sednit espionage toolkit targeting Ukrainian military personnel with two advanced implants since April 2024.
original Mar 10 ESET Research
Sednit reloaded: Back in the trenches
ESET researchers document how the Sednit APT group has reemerged with a modern toolkit centered on two paired implants – BeardShell and Covenant.
original Part of the PlainSec briefing for 2026-03-11
Every edition of this story: Russian GRU APT Resurfaces Using Cloud-based Espionage Toolkit
More from today Threats & Adversaries · APT / Espionage
Russian GRU APT Resurfaces Using Cloud-based Espionage Toolkit Sednit (Unit 26165/GRU) resumed espionage against Ukrainian military and government targets. ESET links deployments since April 2024 of SlimAgent, BeardShell and a reworked Covenant using legitimate cloud services for C2. The paired implants enable sustained surveillance and operational resilience.
3 sources · Mar 10
Timeline Sources Mar 10 Dark Reading
Russian Threat Actor Sednit Resurfaces With Sophisticated Toolkit
After several years of using simple implants, the Russia-affiliated threat actor is back with two new sophisticated malware tools.
original Mar 10 Help Net Security
This spy tool has been quietly stealing data for years - Help Net Security
ESET researchers uncover the Sednit espionage toolkit targeting Ukrainian military personnel with two advanced implants since April 2024.
original Mar 10 ESET Research
Sednit reloaded: Back in the trenches
ESET researchers document how the Sednit APT group has reemerged with a modern toolkit centered on two paired implants – BeardShell and Covenant.
original Part of the PlainSec briefing for 2026-03-11
Every edition of this story: Russian GRU APT Resurfaces Using Cloud-based Espionage Toolkit
More from today