An ongoing cyber espionage campaign against Kazakhstan has been linked to Russian threat actors. The campaign is part of Russia’s attempts to gather intelligence in Central Asia. The attacks likely share overlap with APT28, a Russian state-sponsored hacking group. APT28 is known to be affiliated with Russia’s General Staff Main Intelligence Directorate (GRU). The intrusions were first detected in early 2023 after attacks on government entities using malware. The targeting of the malware “suggests a focus on intelligence collection” in various government-related sectors. 

Read more: https://thehackernews.com/2025/01/russian-linked-hackers-target.html