Ukraine confirms suspected APT28 campaign targeting prosecutors, anti-corruption agencies

A reported long-running cyber-espionage campaign attributed to Russian-linked APT28 exploited Roundcube webmail vulnerabilities (RCE via simply opening emails) to compromise more than 170 prosecutor and investigator email accounts across Ukraine and nearby NATO/Balkan countries since 2023; CERT-UA identified three attack waves and some stolen material was posted online though affected Ukrainian agencies report limited internal system access or sensitive data loss.