Threat Intelligence / Actor / APT28 / Fancy Bear / Sednit

APT28 / Fancy Bear / Sednit

Nation: Russia · 1 tracked threat(s) · Categories: APT

Also known as: Fancy Bear, Sednit, Sofacy, Forest Blizzard, BlueDelta, Pawn Storm, Strontium, UAC-0001, Iron Twilight, Tsar Team, GRU Unit 26165, APT28

Tracked threats

APT28 (Fancy Bear) BEARDSHELL Backdoor & COVENANT C2 Framework — Long-term Ukrainian Military Espionage Campaign (CVE-2026-21509) — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence