logo

Russia-aligned hackers target Tajikistan in new espionage campaign

ID: c014884d-8a37-5098-89c5-d025a369a459

STIX ID: report--c014884d-8a37-5098-89c5-d025a369a459

Feed Name: The Record from Recorded Future News

Threat Score
85/100

Date Published: 2025-05-22

Date Updated: 2026-05-01

...
...

Recorded Future’s Insikt Group observed a January–February cyber-espionage campaign by TAG-110 (linked to APT28/BlueDelta) targeting government, academic and research institutions in Tajikistan using phishing emails with government-themed macro-enabled Word decoys; researchers note a shift from Hatvibe to macro-based infection and potential follow-on deployment of espionage tools such as Cherryspie or Logpie.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.