Google Warns 14,000 Users of Attacks from APT28

Earlier this week, Google disclosed that thousands of Gmail users were involved in a spear-phishing campaign from the state-backed APT28 threat group. Roughly 14,000 individuals from varying industries were contacted about this campaign, urging that the alert was only informative and that compromise was highly unlikely. These alerts made up an estimated 86% of distributed warnings throughout the month of September. The actors behind this campaign, FancyBear (tracked as APT28), is a Russian-backed threat group who were recently linked by the Federal Bureau of Investigation and National Security Agency to Russian military intelligence operations. FancyBear commonly engages in extensive campaigns involving data theft and cyber espionage activities, gathering information from various entities in a variety of countries. Remediation efforts from this campaign have allowed Google to advertise their Advanced Protection Program, urging highly targeted individuals such as journalists, activists, and government officials to sign up for the program to further protect their personal/business accounts.