Cybersecurity incident — 2019-07-23 00:00:00
Affected organization: Christo Grozev
Affected country: United Kingdom of Great Britain and Northern Ireland
Industry: Other Services (except Public Administration)
Event type: Exploitive
Event subtype: Exploitation of Application Server
Motive: Political-Espionage
Actor: GRU 85th Main Special Service Center (Unit 26165) (FANCYBEAR)
Actor type: Nation-State
Actor country: Russian Federation

A threat actor conducted a phishing attack on Bellingcat who have been probing Russian intelligence activities. The phishing email was sent to Christo Grozev, a Bellingcat contributor. APT28 is suspected to be the threat actor.