APT28
Nation-state Espionage Russia Active
Aliases: Fancy Bear · Sofacy · Sednit · Forest Blizzard · Strontium · Pawn Storm · Fighting Ursa
- Mentions
- 1
- First seen
- 12 Jul 2026
- Last seen
- 12 Jul 2026
Relevant to you · Relevant
- Threat focus:
- espionage / apt
- Sector / region:
- DACH
Origin
Russia — Russian military intelligence (GRU Unit 26165)
Profile
APT28, also known as Fancy Bear, is a cyber unit attributed to Russia's FSB. Recent reporting holds the group responsible for an attack on Poland's power grid. This incident prompted the first joint cyber sanctions from the UK and EU.
Targeted sectors
Energy
Targeted regions
Europe
Targeted countries
Poland