APT28 Phishing Campaign Impersonates Ukrainian Government

Credential harvesting targeting military procurement officers. CyberBlackmail analysts have confirmed indicators linking this incident to ongoing threat activity. Organizations in the Government sector should review detection rules for credential phishing and validate backup integrity. Key findings: - Attack vector: Credential phishing - Severity: HIGH - Category: APT Recommended actions include threat hunting across identity logs, network egress monitoring, and patch verification for known exploited vulnerabilities.