Threat Intelligence / Actor / Pawn Storm / APT28 / Fancy Bear

Pawn Storm / APT28 / Fancy Bear

Nation: Russia · 1 tracked threat(s) · Categories: APT

Also known as: APT28, Fancy Bear, UAC-0001, Forest Blizzard, Sofacy, Sednit, STRONTIUM, GruesomeLarch, ITG05, Blue Athena, TA422, Fighting Ursa

Tracked threats

Pawn Storm (APT28) Deploys PRISMEX Malware Suite via CVE-2026-21509 and CVE-2026-21513 Zero-Days Targeting Ukrainian Defense Supply Chain — CRITICAL

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence