[Stanley]

APT28 Uses BEARDSHELL and COVENANT Malware to Spy on Ukrainian Military

The Russian state-sponsored hacking group tracked as APT28 has been observed using a pair of implants dubbed BEARDSHELL and COVENANT to facilitate long‑term surveillance of Ukrainian military personnel.
The two malware families have been put to use since April 2024, ESET said in a new report shared with The Hacker News.
APT28, also tracked as Blue Athena, BlueDelta, Fancy Bear, Fighting Ursa,

https://thehackernews.com/2026/03/apt28-...enant.html

[shakur123]

Classic APT28 playbook—quiet persistence, targeted surveillance, and custom implants to stay embedded long-term.

BEARDSHELL + COVENANT combo signals maturity: modular, stealthy, and built for sustained ops, not smash-and-grab. This isn’t noise—it’s strategic intel collection.