Security News APT28 Targets Ukrainian UKR-net Users in Long-Running Credential Phishing Campaign TheHackerNews Daniel Bender 17 Dec 2025 APT28 ran a sustained phishing campaign from June 2024 to April 2025, using fake UKR.net login pages to steal credentials and 2FA codes.
