APT28 Deploys PRISMEX Malware in Campaign Targeting Ukraine and NATO Allies
APT28 Deploys PRISMEX Malware in Campaign Targeting Ukraine and NATO Allies
08 April 2026
The Russian threat actor known as APT28 (aka Forest Blizzard and Pawn Storm) has been linked to a fresh spear-phishing campaign targeting Ukraine and its allies to deploy a previously undocumented malware suite codenamed PRISMEX.
"PRISMEX combines advanced steganography, component object model (COM) hijacking, and legitimate cloud service abuse for command-and-control," Trend Micro