
The Hacker News
Security•2026-03-10
APT28 Uses BEARDSHELL and COVENANT Malware to Spy on Ukrainian Military
This article covers APT28 (Fancy Bear/Sednit), a Russian GRU-affiliated threat actor, using two malware implants—BEARDSHELL and COVENANT—to conduct long-term surveillance of Ukrainian military personnel since April 2024.