APT NOTESAPT28
A Russian military intelligence-linked intrusion set publicly associated with long-running espionage operations against government, defence, logistics, technology and related targets.
OriginRussia
Statusactive
Confidencehigh
Reviewed5 Aug 2026
Structured threat intelligence
Threat actor intelligence,
structured for research.
A source-driven knowledge base covering threat actors, aliases, campaigns, malware, targeting and attribution.
Browse actors →1Actors
3Aliases
0Campaigns
0Malware
0Tools
3Sources
Recently reviewed profiles
All actors →Browse the knowledge base
Actors
Browse structured records →Campaigns
Browse structured records →Malware
Browse structured records →Tools
Browse structured records →Techniques
Browse structured records →Sources
Browse structured records →
Browse structured records →Campaigns
Browse structured records →Malware
Browse structured records →Tools
Browse structured records →Techniques
Browse structured records →Sources
Browse structured records →
Latest intelligence changes
Complete change log →APT28 profile created
Initial source-backed actor profile added with normalized aliases, attribution and a password-spraying relationship.