Home › Threat Actors › APT28 / Fancy Bear

Nation-State APT 🔴 ACTIVE 2026 Origin: Russia

APT28 / Fancy Bear

Active Nation-State APT group targeting Government, Defense, Energy and other sectors. Tracked by CYBERDUDEBIVASH SENTINEL APEX since 2024.

4Known TTPs

2CVEs Used

4Target Sectors

ACTIVEStatus 2026

⚔️ Known TTPs

▸Spearphishing with credential harvesting
▸VPN zero-day exploitation
▸Outlook zero-click exploitation
▸LOTL post-exploitation

🎯 Target Sectors

🏢 Government
🏢 Defense
🏢 Energy
🏢 Political Orgs

🔓 CVEs Exploited

⚡ INTELLIGENCE AVAILABLE

APT28 / Fancy Bear Detection Rules + IOC Pack

Sigma rules, YARA signatures, and full IOC database for detecting APT28 / Fancy Bear activity in your environment.

🛡️ Get Detection Pack → 🏢 Enterprise Advisory →