Threat Intelligence / Actor / Russian State-Sponsored

Russian State-Sponsored

Nation: Russia · 1 tracked threat(s) · Categories: VULNERABILITY

Also known as: APT28, APT29, Sandworm, GRU, FSB, IRON TWILIGHT, SNAKEMACKEREL, Swallowtail, Group 74, Sednit, Sofacy, Pawn Storm

Tracked threats

CVE-2026-21509: Russian Hackers Exploit Microsoft Office Vulnerability Against Ukraine — CRITICAL

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence