
APT28 Deploys BEARDSHELL and COVENANT Malware for Ukrainian Military Surveillance
CybersecurityHackingMalwareEspionageAPT28FancyBearUkraineMilitarySurveillanceESET
The Russian state-sponsored hacking group APT28, also known as Blue Athena, BlueDelta, or Fancy Bear, has deployed two malware implants named BEARDSHELL and COVENANT to conduct long-term surveillance of Ukrainian military personnel. These malware families have been actively used since April 2024, according to a report by ESET. The campaign specifically targets Ukrainian military entities, enabling persistent espionage operations. No additional technical details, CVEs, or broader impacts were explicitly stated in the available content.