Cybersecurity articles tagged #Russia on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/leaked-russian-cyber-ops-training-exposes-institutional-pathwayshttps://runtimerebel.com/blog/leaked-russian-cyber-ops-training-exposes-institutional-pathwaysLeaked materials reveal Russia's institutional system for generating cyber capabilities, linking university recruitment to GRU and Sandworm units for diverse operations.Tue, 01 Sep 2026 19:02:45 GMTGRUSandwormRussiaCyber WarfareAPT28https://runtimerebel.com/blog/busysnake-infostealer-targets-critical-infrastructure-armored-likho-s-ttpshttps://runtimerebel.com/blog/busysnake-infostealer-targets-critical-infrastructure-armored-likho-s-ttpsBusySnake infostealer, deployed by Armored Likho, infiltrates critical infrastructure in Russia, Brazil, and Kazakhstan. Understand their TTPs and mitigation strategies.Tue, 07 Jul 2026 03:34:06 GMTBusySnakeInfostealerArmored LikhoCritical InfrastructureGovernmentElectrical PowerRussiaBrazilKazakhstanhttps://runtimerebel.com/blog/russia-s-evolving-influence-ecosystem-global-pivot-ai-integrationhttps://runtimerebel.com/blog/russia-s-evolving-influence-ecosystem-global-pivot-ai-integrationRussia's influence ecosystem pivots from Ukraine-centric operations to global targets, leveraging generative AI and hybrid cyber-IO tactics.Mon, 29 Jun 2026 17:08:38 GMTRussiaInfluence OperationsInformation OperationsHacktivismGenerative AIAPT44SandwormNoName057 16NATOEUCyber Enabled IOhttps://runtimerebel.com/blog/us-targets-russian-linked-unc5792-unc4221-hackers-of-messaging-appshttps://runtimerebel.com/blog/us-targets-russian-linked-unc5792-unc4221-hackers-of-messaging-appsUS State Dept. offers $10M for info on Russian-linked UNC5792 & UNC4221 groups targeting WhatsApp, Signal users. Learn about nation-state threats.Mon, 29 Jun 2026 17:06:46 GMTUNC5792UNC4221RussiaState SponsoredWhatsAppSignalTargetinghttps://runtimerebel.com/blog/iranian-russian-cyber-enabled-maritime-sanctions-evasion-tacticshttps://runtimerebel.com/blog/iranian-russian-cyber-enabled-maritime-sanctions-evasion-tacticsExplore the sophisticated cyber tactics used by Iranian and Russian shadow fleets to evade sanctions, leveraging fake maritime websites and fraudulent documents.Fri, 12 Jun 2026 09:43:20 GMTIranRussiaSanctions EvasionMaritime SecurityShadow FleetFraudDigital IdentityIllicit Shippinghttps://runtimerebel.com/blog/the-hosting-dutch-raid-fails-to-halt-russian-bulletproof-opshttps://runtimerebel.com/blog/the-hosting-dutch-raid-fails-to-halt-russian-bulletproof-opsDutch law enforcement seized 800 servers and arrested two operators of THE.Hosting, a Russian bulletproof host, but its core IP infrastructure persists.Thu, 28 May 2026 20:54:11 GMTTHE HostingBulletproof HostingCybercrime InfrastructureLaw Enforcement OperationRussiaNetherlandshttps://runtimerebel.com/blog/gchq-warning-russian-gray-zone-tactics-and-ai-driven-cyber-threatshttps://runtimerebel.com/blog/gchq-warning-russian-gray-zone-tactics-and-ai-driven-cyber-threatsGCHQ Director Anne Keast-Butler warns that AI is an unstoppable force that Russian state-sponsored actors are leveraging for gray zone cyber operations.Wed, 27 May 2026 20:48:14 GMTGCHQRussiaArtificial IntelligenceGray ZoneNation Statehttps://runtimerebel.com/blog/silver-fox-apt-tax-themed-phishing-delivers-abcdoor-to-india-russiahttps://runtimerebel.com/blog/silver-fox-apt-tax-themed-phishing-delivers-abcdoor-to-india-russiaChina-backed Silver Fox APT targets organizations in India and Russia with over 1,600 tax-themed phishing messages to deploy ABCDoor backdoor and ValleyRAT.Mon, 04 May 2026 16:46:54 GMTSilver FoxABCSDoorValleyRATPhishingIndiaRussiaAPTBackdoorTax Themed Attackshttps://runtimerebel.com/blog/silver-fox-deploys-abcdoor-malware-via-tax-themed-phishinghttps://runtimerebel.com/blog/silver-fox-deploys-abcdoor-malware-via-tax-themed-phishingChina-linked threat actor Silver Fox targets Russian and Indian organizations using tax-themed lures to deliver the novel ABCDoor malware via phishing waves.Mon, 04 May 2026 12:42:24 GMTSilver FoxABCDoorPhishingIndiaRussiaChina Linkedhttps://runtimerebel.com/blog/us-strategic-pivot-cyber-risk-and-geopolitical-shift-analysishttps://runtimerebel.com/blog/us-strategic-pivot-cyber-risk-and-geopolitical-shift-analysisAnalysis of the US strategic shift toward force-driven security and its implications for cyber threats from China, Russia, Iran, and criminal groups.Thu, 30 Apr 2026 16:41:48 GMTGeopoliticsChinaRussiaIranTransnational Organized CrimeWestern Hemispherehttps://runtimerebel.com/blog/uk-cyber-chief-russia-iran-china-drive-top-cyber-threatshttps://runtimerebel.com/blog/uk-cyber-chief-russia-iran-china-drive-top-cyber-threatsNCSC warns British businesses of escalating cyber threats from state-sponsored groups in Russia, Iran, and China, urging preparedness for potential large-scale attacks.Wed, 22 Apr 2026 20:26:36 GMTUKNCSCRussiaIranChinaNation StateCyber WarfareCritical Infrastructurehttps://runtimerebel.com/blog/apt28-analysis-mitigation-strategies-against-fancy-bear-campaignshttps://runtimerebel.com/blog/apt28-analysis-mitigation-strategies-against-fancy-bear-campaignsA technical analysis of APT28's global operations, highlighting the necessity of Zero Trust and rapid patching to counter Fancy Bear threat activity.Fri, 10 Apr 2026 08:40:01 GMTAPT28Fancy BearRussiaNation StateZero Trusthttps://runtimerebel.com/blog/russian-hackers-exploit-routers-to-steal-microsoft-office-tokenshttps://runtimerebel.com/blog/russian-hackers-exploit-routers-to-steal-microsoft-office-tokensRussian military intelligence-linked hackers exploited known router flaws to harvest Microsoft Office authentication tokens from over 18,000 networks, posing a…Tue, 07 Apr 2026 20:19:57 GMTRussiaMilitary IntelligenceRouter SecurityMicrosoft OfficeAuthentication TokensNation StateEspionagehttps://runtimerebel.com/blog/russian-authorities-arrest-leakbase-admin-for-stolen-data-saleshttps://runtimerebel.com/blog/russian-authorities-arrest-leakbase-admin-for-stolen-data-salesRussian law enforcement arrested the alleged administrator of LeakBase, a major marketplace for stolen credentials, disrupting a key cybercrime resource.Wed, 25 Mar 2026 20:16:40 GMTLeakBaseCybercrimeStolen CredentialsRussiaLaw Enforcementhttps://runtimerebel.com/blog/sednit-apt28-resurfaces-advanced-toolkit-threat-analysishttps://runtimerebel.com/blog/sednit-apt28-resurfaces-advanced-toolkit-threat-analysisRussian-affiliated APT Sednit (APT28) has returned with sophisticated new malware, shifting from simple implants. Understand their updated TTPs and mitigation strategies.Tue, 10 Mar 2026 20:14:43 GMTSednitAPT28RussiaNation StateMalwareToolkithttps://runtimerebel.com/blog/ex-l3harris-executive-sentenced-for-selling-zero-days-to-russiahttps://runtimerebel.com/blog/ex-l3harris-executive-sentenced-for-selling-zero-days-to-russiaFormer Trenchant CEO James Michael Robinson sentenced to 90 months for stealing zero-day exploits and selling them to a Russian state-linked broker.Wed, 25 Feb 2026 12:25:01 GMTL3HarrisTrenchantZero-DayInsider ThreatRussiaEspionageCyber Exploitshttps://runtimerebel.com/blog/us-treasury-sanctions-russian-broker-for-stolen-zero-day-exploitshttps://runtimerebel.com/blog/us-treasury-sanctions-russian-broker-for-stolen-zero-day-exploitsThe US sanctions Artem Kruglov and associated firms for brokering stolen hacking tools and zero-day exploits for Russian intelligence services.Wed, 25 Feb 2026 12:24:10 GMTOFACSanctionsZero-DayArtem KruglovRussiaCyber EspionageSVRhttps://runtimerebel.com/blog/russia-s-escalating-new-generation-hybrid-warfare-in-europehttps://runtimerebel.com/blog/russia-s-escalating-new-generation-hybrid-warfare-in-europeAnalysis of Russia's coordinated New Generation Warfare against NATO, blending cyber attacks, sabotage, and influence operations. Understand the threat.Wed, 25 Feb 2026 04:48:06 GMTRussiaNew Generation WarfareHybrid WarfareNATOCyberattacksSabotageInfluence OperationsGeopolitical Threathttps://runtimerebel.com/blog/apt28-operation-macromaze-webhook-driven-macro-execution-targeting-western-europehttps://runtimerebel.com/blog/apt28-operation-macromaze-webhook-driven-macro-execution-targeting-western-europeAnalysis of a targeted campaign attributed to APT28, utilizing macro-enabled documents and legitimate webhook services for command-and-control obfuscation.Tue, 24 Feb 2026 04:40:50 GMTAPT28MacroMazeWebhooksRussiaEspionage