APT28__2023__APT28_CERTFR_2023_EN.pdf
ID: 78404482-eb64-46c7-862c-ed2a996f848e
STIX ID: report--78404482-eb64-46c7-862c-ed2a996f848e
Threat Score
90/100
Uploaded: 2026-08-07
Published Date: 2023-10-30
Last Modified Date: 2023-10-30
Created by: dogesec
TLP:CLEAR
ADMIRALTY:B2
PAP:CLEAR
...
...
ANSSI analyzed APT28 activity since 2021, detailing reconnaissance, initial access (phishing, credential stuffing, zero-day exploitation including CVE-2023-23397), persistence and privilege escalation techniques, collection and exfiltration methods (including CredoMap and mailbox compromise), and provided IoCs and concrete mitigation recommendations for email, authentication, endpoints, and network hygiene.