Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
espionage
RussiaThreat Actor
RussiaThreat ActorActive Threat
APT29
145
IOCs Tracked
7
Intel Reports
Associated IOCs50 total
IP5
104.194.159.150
2026-08-27High31.57.243.154
2026-08-02High38.146.28.752026-08-02High38.146.28.1322026-08-02High107.189.26.194
2026-08-02HighDomain4
ms365-device.com2026-08-02High
m365-owa.com2026-08-02High
ms365-live.com2026-08-02High
owa-ms365.com2026-08-02High
URL3
https://213.145.86.112/cdn/chunks/polyfill-7e2b.min.js2026-08-01High
https://213.145.86.112/t/pixel.gif2026-08-01High
https://213.145.86.112/t/event2026-08-01High
SHA2562
be99857449d2856dd5a84e21c8a3d5e0e01456adb44062ddec5a6b4970d8d42c2026-08-03High
918fa52ae45ed60ba7cc8bdc99c3cbe9ab92e0375ec31fc05d0d4513be11c5932026-08-03High
CVE35
CVE-2026-154092026-09-04High
CVE-2026-850462026-09-12High
CVE-2026-860602026-09-18High
CVE-2024-34002026-08-26High
CVE-2024-81902026-08-26High
CVE-2024-249192026-08-26High
CVE-2024-89632026-08-26High
CVE-2026-13402026-08-26High
CVE-2026-857062026-09-18High
CVE-2026-878862026-09-18High
CVE-2026-823292026-09-11High
CVE-2026-874912026-09-12High
CVE-2026-420162026-09-18High
CVE-2026-03102026-09-11High
CVE-2026-420182026-09-18High
CVE-2026-764612026-09-18Medium
CVE-2026-630772026-08-09Medium
CVE-2026-858802026-09-12Medium
CVE-2026-672762026-09-18Medium
CVE-2026-12812026-08-26Medium
CVE-2026-645312026-09-11Medium
CVE-2025-207012026-09-11Medium
CVE-2026-843882026-09-11Medium
CVE-2026-766692026-09-18Medium
CVE-2026-764602026-09-18Medium
CVE-2026-42012026-09-11Medium
CVE-2026-756502026-09-11Medium
CVE-2026-801722026-09-11Medium
CVE-2026-766932026-09-18Medium
CVE-2026-890492026-09-18Medium
CVE-2026-672772026-09-18Medium
CVE-2026-819632026-09-11Medium
CVE-2026-614102026-09-11Medium
CVE-2026-802382026-09-11Medium
CVE-2026-704262026-08-14Medium
Related Reports7 total
Weekly Threat Landscape Digest – Week 38
HawkEyeSep 18, 2026
Weekly Threat Landscape Digest – Week 37
HawkEyeSep 11, 2026
Edge Infrastructure Under Siege: What Two Independent Datasets Reveal About Who’s Exploiting Your Perimeter
SentinelOne BlogAug 26, 2026
Weekly Cybersecurity Newsletter — Top 50 Cybersecurity Stories of the Week (August 3–7, 2026)
Cyber PressAug 9, 2026
CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft
Microsoft Threat IntelligenceJul 31, 2026
EasterBunny: advanced espionage artifacts attributed to APT29
Lab52May 6, 2026
Harvester APT
APOPHISFeb 23, 2025
Threat Profile
Motivationespionage
OriginRussia
RussiaLast seenSep 2026
IOCs tracked145