The Russian state-sponsored APT28 threat group is using a custom variant of the open-source Covenant post-exploitation framework for long-term espionage operations.

APT28 deploys BEARDSHELL and COVENANT since April 2024 targeting Ukrainian military, enabling cloud-based espionage and persistent surveillance.

As national security services warn that Russian hackers are currently engaged in new global attacks against WhatsApp and Signal users, here’s how to stay safe.

The hacker has been luring users in Brazil to download the fake Starlink app through phishing pages that impersonate the Google Play Store.