APT28 Exploits Signal Messenger to Deploy eardShell and Covenant Malware

Sekoia.io’s Threat Detection and Response (TDR) team has uncovered a sophisticated campaign by APT28 that weaponizes Signal Messenger to deploy two previously undocumented malware families—BeardShell and the Covenant framework. In early 2025, a trusted partner supplied samples that did not match any known infection chain, prompting a joint investigation. On 21 June 2025, CERT-UA published […]

The post APT28 Exploits Signal Messenger to Deploy eardShell and Covenant Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.