Trusted Design

New Sofacy Attacks Against US Government Agency

概要

The Sofacy group, also known as APT28, is a well-known threat group that frequently conducts cyber espionage campaigns. Recently, Unit 42 identified a spear phishing e-mail from the Sofacy group that targeted the United States government. The e-mail was sent from a potentially compromised account belonging to the Ministry of Foreign Affairs of another government entity and carried the Carberp variant of the Sofacy Trojan. The developer implemented a clever persistence mechanism in the Trojan, one which had not been observed in previous attacks. The focus of this blog will be on the attacks and the infrastructure associated with Sofacy using the new persistence mechanism as a correlation point.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• Sofacy APT hits high profile targets (score: 0.68)
• New Attacks Linked to C0d0s0 Group (score: 0.66)
• A Look Into Fysbis: Sofacy’s Linux Backdoor (score: 0.65)
• Chinese Actors attacks on US Government and EU Media (score: 0.65)
• NetTraveler Spear-Phishing Email Targets Diplomat of Uzbekistan (score: 0.65)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る