New Malware Attributed to Russian Hacking Group APT28

This report summarizes CERT‑UA and SecurityScorecard findings that APT28 (Fancy Bear) has been using a new backdoor called OCEANMAP to deliver malicious links that harvest and exfiltrate web browser data from Ukrainian and Polish targets; it also highlights exploitation of the critical Outlook flaw CVE‑2023‑23397, references other Russian state-linked attacks (e.g., Sandworm against Kyivstar), and recommends urgent mitigations such as patching, enforcing MFA, securing RDP, and continuous third-/fourth-party risk monitoring.