ESET reports APT28 has used BEARDSHELL and COVENANT since April 2024 to conduct persistent surveillance of Ukrainian military personnel.
Part of the PlainSec briefing for 2026-03-10