CVE Tools
Back to feed
Exploited in the wild BeardShell Sednit (APT28) phishing Covenant ESET

Sednit reloaded: Back in the trenches

ESET WeLiveSecurity·By ESET Research··15 min read

Since April 2024, Sednit’s advanced development team has reemerged with a modern toolkit centered on two paired implants, BeardShell and Covenant, each using a different cloud provider for resilience. This dual‑implant approach enabled long‑term surveillance of Ukrainian military personnel. Interestingly, these current toolsets show a direct code lineage to the group’s 2010‑era implants.…

Continue reading on ESET WeLiveSecurity