Hack Forums
APT28 Uses BEARDSHELL and COVENANT Malware to Spy on Ukrainian Military - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: APT28 Uses BEARDSHELL and COVENANT Malware to Spy on Ukrainian Military (/showthread.php?tid=6322209)



APT28 Uses BEARDSHELL and COVENANT Malware to Spy on Ukrainian Military - Stanley - Mar 18, 2026

APT28 Uses BEARDSHELL and COVENANT Malware to Spy on Ukrainian Military

The Russian state-sponsored hacking group tracked as APT28 has been observed using a pair of implants dubbed BEARDSHELL and COVENANT to facilitate long‑term surveillance of Ukrainian military personnel.
The two malware families have been put to use since April 2024, ESET said in a new report shared with The Hacker News.
APT28, also tracked as Blue Athena, BlueDelta, Fancy Bear, Fighting Ursa,

https://thehackernews.com/2026/03/apt28-uses-beardshell-and-covenant.html


RE: APT28 Uses BEARDSHELL and COVENANT Malware to Spy on Ukrainian Military - shakur123 - Mar 18, 2026

Classic APT28 playbook—quiet persistence, targeted surveillance, and custom implants to stay embedded long-term.

BEARDSHELL + COVENANT combo signals maturity: modular, stealthy, and built for sustained ops, not smash-and-grab. This isn’t noise—it’s strategic intel collection.