A group of hackers believed to be associated with Russia’s Main Intelligence Directorate (GRU), better known as APT28 or Fancy Bear, was responsible for last week’s international ransomware attack dubbed “BadRabbit,” according to Ukraine’s top law enforcement agency, the Security Service of Ukraine (SBU). In a letter sent to CyberScoop Wednesday, SBU officials laid blame on APT28 for launching the massive, coordinated attack that disrupted business operations within hundreds of organizations based in both Ukraine and Russia. Victims included multiple Russian news outlets, government organizations and Ukrainian transportation services.

Read full news article on Cyberscoop