Russian state-sponsored group APT28 has been targeting organizations associated with energy research, defense collaboration, and government communication in a new credential-harvesting campaign, Recorded Future reports. Active since at least 2004 and also known as BlueDelta, Fancy Bear, Forest Blizzard, Sednit, and Sofacy, APT28 has been linked to the Russian General Staff Main Intelligence Directorate (GRU). The hacking group is known for targeting energy, government, military, and media entities in the US and Europe, and was blamed last year for targeting the TV5Monde broadcasting station, and for exploiting mail servers since September 2023. Last year, an APT28 credential harvesting activity targeted people associated with a Turkish energy and nuclear research agency and a European…