A closer look at the hacker group APT28, also known as Fancy Bear.

APT28 does not operate randomly. Its target selection is systematic and politically driven, aligning with russia’s active geopolitical interests.

During the 2016 U.S. presidential election, the breach of email accounts and servers belonging to U.S. political organizations became more than a hacking incident — it became an instrument of geopolitical influence. Entities such as the Democratic National Committee were compromised, and stolen materials were later weaponized in the information domain.

In 2017, the NotPetya cyberattack caused more than $10 billion in global economic damage, disrupting ports, manufacturing operations, and logistics networks worldwide.

According to official statements from the U.S. and U.K. governments, the attack was attributed to units of russia’s military intelligence agency (GRU) — specifically the group known as Sandworm (also referred to as APT44).

OSINT Copilot is an intelligence automated solution to quickly collect and organize open-source information in one place. Instantly structured data instead of spending time manually assembling information.

The Service utilizes AI and LLMs to generate reports, summaries, and risk assessments.

OSINT Copilot can help you:

• Collect information from multiple open sources

Good news for Matrix users: we’ve launched an open news channel!

We’ll be sharing updates, analytical notes, and announcements — directly on Matrix.

Join here

The Aggregator tool has been updated with one new data source: LeakCheck. LeakCheck is a breach-search service that helps identify exposed credentials and related leak artifacts by searching across large leak datasets (e.g., email/username and other supported query types), with options for API-based integration, monitoring, and bulk checks.