Cyber threat actor
APT28
Russian military intelligence (GRU 85th GTsSS, Unit 26165) · active since 2004
GRU signals-intelligence unit conducting political, military and election-related intrusions against the United States, NATO members and Ukraine, including the 2016 DNC compromise and later router-exploitation campaigns.
Aliases
Fancy BearForest BlizzardSofacyUnit 26165
Primary targets
Political organizations Defense ministries Logistics firms supporting Ukraine Energy sector
MITRE ATT&CK techniques
0 techniques mapped · click any technique ID to open the MITRE ATT&CK entry, any CVE to view its NVD record, or any citation for source reporting.
No MITRE ATT&CK mapping available yet for APT28.