APT28
Threat Actor
APT28 does not appear to conduct widespread intellectual property theft for economic gain. Instead, APT28 focuses on collecting intelligence that would be most useful to a government. Specifically, FireEye found that since at least 2007, APT28 has been targeting privileged information related to governments, militaries, and security organizations that would likely benefit the Russian government.
Incidents Associated with this Threat
- September 1, 2024: German Air Traffic Control (DFS) Suffers Cyberattack
- August 29, 2024: German air traffic control (DFS) Operations Unaffected After Cyberattack
- September 5, 2023: Targeted Cyberattack on Ukranian Critical Energy Infrastructure Facility
Malware Used by this Threat Actor
No malware identified for this threat actor.