APT28 Phishes UKR.net Users via Mocky, ngrok, TinyURL
December 17, 2025 at 12:00 AM
A GRU-linked threat group, APT28, is running a sustained credential-harvesting campaign against users of Ukraine’s UKR.net, according to Recorded Future’s Insikt Group. The activity, tracked from …