Threat Research

APT28, a Russian state-sponsored threat group also known as Fancy Bear or UAC-0001, is conducting a sophisticated espionage campaign against European military and government entities. The operation primarily targets maritime and transportation organizations in Poland, Slovenia, Turkey, Greece, the UAE, and Ukraine....

A financially motivated threat actor has been running a malicious campaign since July 2024, primarily targeting users in Poland and Germany. The actor uses phishing emails to deliver various payloads, including Agent Tesla, Snake Keylogger, and a new, undocumented backdoor called TorNet, which is dropped by PureCrypter malware....