French Cyber Agency alerts – APT28 targeting think tanks

TLDR:

• French National Agency for Information Systems Security warns of cyberattacks by APT28 against think tanks.
• Nation-state actors from North Korea, Russia, China, and Iran target research organizations.

The French National Agency for Information Systems Security has issued a warning about cyberattacks conducted by APT28, a Russian state hacking group, targeting Western think tanks. This group is especially focusing on think tanks studying strategic interests and the defense sector. Nation-state actors from North Korea, Russia, China, and Iran have been identified as the top threats to research organizations globally. Western think tanks specializing in defense and international relations, in particular, have faced an increase in attacks since Russia’s invasion of Ukraine in 2022. APT28, also known as Fancy Bear or Pawn Storm, is the most active hacking group targeting think tanks, stealing sensitive information for various espionage activities. These attacks are part of Russia’s military espionage campaigns, aiming to gain strategic intelligence on geopolitical and defense-related matters.