The French Security Agency said Russian APT28 hackers redoubled their efforts during the Ukrainian war.

France’s ANSSI Cybersecurity Agency said the war in Ukraine prompted the revival of the infamous Russian APT28/Fantasy Bear Group.

According to a brief report released by the agency this week, Positioning and Compromise for French Entities Using APT28 Invasion SetNow, the group is actively targeting the network of government organizations and companies that are linked to Ukrainian allies, including France.

Since 2021, the group has targeted specific industrial sectors, including aerospace, financial services, think tanks and research, local government and government ministries.