Threats · 234 days ago

APT28 conducts long-running surveillance of Ukrainian military

ESET reports APT28 has used BEARDSHELL and COVENANT since April 2024 to conduct persistent surveillance of Ukrainian military personnel.

Timeline

• Mar 10 Reported by The Hacker News

Sources

2 sources covering this story

• The Hacker News Mar 10

  APT28 Uses BEARDSHELL and COVENANT Malware to Spy on Ukrainian Military

  APT28 deploys BEARDSHELL and COVENANT since April 2024 targeting Ukrainian military, enabling cloud-based espionage and persistent surveillance.

• BleepingComputer Mar 10

  APT28 hackers deploy customized variant of Covenant open-source tool

  The Russian state-sponsored APT28 threat group is using a custom variant of the open-source Covenant post-exploitation framework for long-term espionage operations.

Entities

• APT28

Part of the PlainSec briefing for 2026-03-10

Editions

• Briefing for 2026-03-10

Related stories

• Microsoft Teams phishing installs A0Backdoor in finance, healthcare
• Scammers impersonate city officials to steal permit fees