Russia-linked APT28 uses PRISMEX to infiltrate Ukraine and allied infrastructure with advanced tactics

APT28 targets Ukraine and allies with PRISMEX malware, using stealthy techniques for espionage and command-and-control.

Security Affairs
Pawn Storm Campaign Deploys PRISMEX, Targets Government and Critical Infrastructure Entities
#PawnStorm #PRISMEX #CVE_2026_21509 #CVE_2026_21513
https://www.trendmicro.com/en_us/research/26/c/pawn-storm-targets-govt-infra.html
Pawn Storm Campaign Deploys PRISMEX, Targets Government and Critical Infrastructure Entities

This blog discusses the steganography, cloud abuse, and email-based backdoors used against the Ukrainian defense supply chain in the latest Pawn Storm campaign that TrendAI™ Research observed and analyzed.

Trend Micro