Automated evidence cluster
Automatically correlated reporting linking APT29 to activity affecting Defence. Review the supporting sources before treating attribution as confirmed.
Actors in supporting reports
APT29STORM-2945UNC5976UNC6293UNC7005APT15APT20APT27APT28APT30APT31APT33APT34APT35APT37APT39APT40APT41APT42APT44APT45FIN7SandwormUNC1069UNC1088UNC2814UNC4057
Google Threat Intelligence Group · 20 Aug 2026
Threat IntelligenceGoing with the Flow(s): Distinct Clusters Target Individuals of Interest to RussiaAugust 20, 2026Google Threat Intelligence Group Google Threat IntelligenceVisibility and context on the threats that matter most.Contact Us & Get a Demo Written by: Gabby Roncone,…
Google Threat Intelligence Group · 24 Jul 2026
Update (July 30): A table listing the new names of select prominent threat actors was appended to this post. Introduction Today, Google Threat Intelligence Group (GTIG) will begin rolling out a unified naming schema for tracking threat actors.…
Palo Alto Networks Unit 42 · 20 Aug 2026
Threat Research CenterThreat ResearchMalware Malware Identity Abuse Through Trusted Communication Channels 12 min read Related ProductsCortexCortex XDRCortex XSIAMIdiraUnit 42 Incident Response By:Bill Batchelor Published:August 20, 2026 Categories:MalwareThreat Research Tags:AuthenticationIdentity theftMalwareMFARemote access softwareSocial engineering Share Executive Summary Identity has…
