Cybersecurity incident
Date: 2018-02-28 00:00:00
Affected organization: Informationsverbund Berlin-Bonn
Affected country: Germany
Industry: Public Administration
Event type: Exploitive
Event subtype: Exploitation of Application Server,Exploitation of End Hosts
Motive: Political-Espionage
Actor: GRU 85th Main Special Service Center (Unit 26165) (FANCYBEAR)
Actor type: Nation-State
Actor country: Russian Federation
Description: According to a report issued by the German news agency DPA, malicious actors from APT28 AKA Fancy Bear infiltrated several German government agencies, including the Defense and Foreign ministries, for more than a year. The hackers reportedly infiltrated the Informationsverbund Berlin-Bonn, an air-gapped network used by the German government.