Palo Alto Networks

Sofacy

Dear Joohn: The Sofacy Group’s Global Campaign

As alluded to in our previous blog regarding the Cannon tool, the Sofacy group (AKA Fancy Bear, APT28, STRONTIUM, Pawn Storm, Sednit) has persistently attacked various government and private organizations around the world from mid-October 2018 through mid-November 2018. The majority of targets were NATO-aligned nation states, al...

Unit 42
Dec 12, 2018
By  and

Palo Alto Networks

Announcements
Company & Culture
Points of View
Public Sector
Products and Services
Partners
Events, News of the Week

Palo Alto Networks News of the Week – July 23, 2016

Unit 42 found Andromeda malware targeting Italian users in recent spam campaigns, and shared a technical walkthrough of the Office Test persistence method used in recent Sofacy attacks. The team also discovered...
Jul 23, 2016
By 
Technical Walkthrough: Office Test Persistence Method Used In Recent Sofacy Attacks
Threat Prevention, Uncategorized, Unit 42

Technical Walkthrough: Office Test Persistence Method Used In Recent Sofacy...

As mentioned in our previous blog, we observed the Sofacy group using a new persistence mechanism that we call “Office Test” to load their Trojan each...
Jul 20, 2016
By 
Events, News of the Week

Palo Alto Networks News of the Week – June 18

Unit 42 identified a spear phishing attack from the Sofacy group targeting the United States government. The news was covered by SecurityWeek and Ars Technica, among others.
Jun 18, 2016
By 
Unit 42

New Sofacy Attacks Against US Government Agency

The Sofacy group, also known as APT28, is a well-known threat group that frequently conducts cyber espionage campaigns. Recently, Unit 42 identified a spear phishing e-mail from the Sofacy group that targeted t...
Jun 14, 2016
By  and
Malware, Threat Prevention, Unit 42

A Look Into Fysbis: Sofacy’s Linux Backdoor

The Sofacy group, also known as APT28 and Sednit, is a fairly well known cyber espionage group believed to have ties to Russia. Their targets have spanned all across the world, with a focus on government, defen...
Feb 12, 2016
By  and

Subscribe to the Blog!

Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.

By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.

Get the latest news, invites to events, and threat alerts