{"id":38583,"date":"2020-12-08T14:42:00","date_gmt":"2020-12-08T14:42:00","guid":{"rendered":"http:\/\/b521ea62-d2b7-4d5f-9fa6-382e0928d5b7"},"modified":"2020-12-08T14:42:00","modified_gmt":"2020-12-08T14:42:00","slug":"norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\/","title":{"rendered":"Norway says Russian hacking group APT28 is behind August 2020 Parliament hack"},"content":{"rendered":"<figure class=\"image image-original shortcode-image\"><span class=\"img aspect-set \"><img decoding=\"async\" src=\"https:\/\/zdnet3.cbsistatic.com\/hub\/i\/2020\/03\/20\/580fac64-b986-4abd-97e3-029ab2669ee9\/apt28.jpg\" class alt=\"APT28\"><\/span><figcaption><span class=\"caption\"><\/span><\/figcaption><\/figure>\n<p>APT28, one of Russia&#8217;s military hacking units, was most likely responsible for hacking the email accounts of the Norwegian Parliament, the Norwegian police secret service (PST) said today.<\/p>\n<div class=\"relatedContent alignRight\" readability=\"8.0321285140562\">\n<h3 class=\"heading\"> <span class=\"int\">Special feature<\/span> <\/h3>\n<div class=\"thumb\"> <a href=\"https:\/\/www.zdnet.com\/topic\/cyberwar-and-the-future-of-cybersecurity\/\" data-omniture-track=\"moduleClick\" data-omniture-track-data=\"{&quot;moduleInfo&quot;: &quot;pinbox&quot;, &quot;pageType&quot;: &quot;article&quot;}\" data-vanity-rewritten=\"true\"> <span class=\"img \"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/zdnet3.cbsistatic.com\/hub\/i\/r\/2016\/09\/01\/fa215859-76c8-4ab7-8b55-56a42e0d8950\/resize\/220x165\/cf651a47272fd8abf79b87f4b45ba3c4\/09-2016-special-feature-cover-art.jpg\" class alt=\"Cyberwar and the Future of Cybersecurity\" height=\"165\" width=\"220\"><\/span> <\/a> <\/div>\n<p class=\"title\"> <a href=\"https:\/\/www.zdnet.com\/topic\/cyberwar-and-the-future-of-cybersecurity\/\" data-omniture-track=\"moduleClick\" data-omniture-track-data=\"{&quot;moduleInfo&quot;: &quot;pinbox&quot;, &quot;pageType&quot;: &quot;article&quot;}\" data-vanity-rewritten=\"true\"> Cyberwar and the Future of Cybersecurity <\/a> <\/p>\n<p class=\"dek\">Today&#8217;s security threats have expanded in scope and seriousness. There can now be millions &#8212; or even billions &#8212; of dollars at risk when information security isn&#8217;t handled properly.<\/p>\n<p class=\"read-more\"> <a href=\"https:\/\/www.zdnet.com\/topic\/cyberwar-and-the-future-of-cybersecurity\/\" data-omniture-track=\"moduleClick\" data-omniture-track-data=\"{&quot;moduleInfo&quot;: &quot;pinbox&quot;, &quot;pageType&quot;: &quot;article&quot;}\" data-vanity-rewritten=\"true\">Read More<\/a> <\/p>\n<\/p><\/div>\n<p>The Norwegian Parliament (Stortinget) hack was disclosed earlier this year on September 1. At the time, Stortinget director Marianne said that hackers gained access to the Parliament&#8217;s email system and&nbsp;<a href=\"https:\/\/www.zdnet.com\/article\/norwegian-parliament-discloses-cyber-attack-on-internal-email-system\/\" target=\"_blank\" rel=\"noopener noreferrer\">accessed inboxes for Stortinget employees and government elected officials<\/a>.<\/p>\n<p>No details about the hack were made public in September, but in a follow-up in October,&nbsp;<a href=\"https:\/\/www.regjeringen.no\/no\/aktuelt\/pm_inbrudd\/id2770135\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">Foreign Minister Ine Eriksen S\u00f8reide said<\/a>&nbsp;that initial clues suggested that the attack was most likely carried out by Russian hackers, an accusation that Moscow immediately denied.<\/p>\n<p>The next day, Russian Foreign Ministry spokeswoman Maria Zakharova&nbsp;<a href=\"https:\/\/tass.com\/politics\/1212669\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">dismissed the allegations<\/a>&nbsp;as &#8220;a planned provocation&#8221; from Norwegian officials looking to &#8220;destroy bilateral relations&#8221; with &#8220;no evidence.&#8221;<\/p>\n<p>Konstantin Kosachev, Head of the Russian Federation Council&#8217;s Committee on Foreign Affairs, also commented on the matter, calling Oslo&#8217;s accusations of Russian involvement in the Stortinget hack as &#8220;<a href=\"https:\/\/tass.com\/politics\/1212669\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">groundless<\/a>.&#8221;<\/p>\n<h3>Norwegian secret service publishes its findings<\/h3>\n<p>But in a&nbsp;<a href=\"https:\/\/pst.no\/alle-artikler\/pressemeldinger\/datainnbruddet-mot-stortinget-er-ferdig-etterforsket\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">PST press release<\/a>&nbsp;today, Norway&#8217;s cyber-security agency held the line with the government&#8217;s initial October accusations.<\/p>\n<p>&#8220;The analysis shows that it is likely that the operation was carried out by a cyber actor referred to in open sources as APT28 and Fancy Bear,&#8221; PST officials said.<\/p>\n<section class=\"sharethrough-top\" data-component=\"medusaContentRecommendation\" data-medusa-content-recommendation-options=\"{&quot;promo&quot;:&quot;promo_zd_recommendation_sharethrough_top_in_article_desktop&quot;,&quot;spot&quot;:&quot;dfp-in-article&quot;}\"> <\/section>\n<p>&#8220;This actor is linked to Russia&#8217;s military intelligence service GRU, more specifically their 85th Special Services Center (GTsSS),&#8221; they added.<\/p>\n<p>PST officials said APT28 hackers breached Stortinget email accounts and tried to pivot to the Parliament&#8217;s internal networks but failed.<\/p>\n<p>Investigators said Stortinget was to blame for the intrusion as officials and employees used weak email passwords and failed to use two-factor authentication to protect accounts.<\/p>\n<p>Other details about the intrusions couldn&#8217;t be revealed due to the sensitive nature of the hack.<\/p>\n<p>PST officials said the attack against its Parliament was part of a larger APT28 campaign that began in 2019 and which targeted multiple other targets, both inside Norway and abroad.<\/p>\n<p>While the PST press release doesn&#8217;t mention it by name, the Norwegian cyber-security agency appears to be referring to a&nbsp;<a href=\"https:\/\/www.microsoft.com\/security\/blog\/2020\/09\/10\/strontium-detecting-new-patters-credential-harvesting\/\" target=\"_blank\" rel=\"noopener noreferrer\" data-component=\"externalLink\">recent Microsoft report<\/a>&nbsp;detail a recent shift in APT28 tactics.<\/p>\n<p>According to this report, from September 2019, the APT28 group started using brute-force and credentials harvesting attacks on a larger scale and began targeting Office365 accounts in order to gain access to email accounts of more than 200 private and government organizations.<\/p>\n<p>PST officials said that despite linking the attacks to known APT28 tactics, they weren&#8217;t able to gather enough evidence to file a formal indictment,&nbsp;<a href=\"https:\/\/www.zdnet.com\/article\/german-authorities-charge-russian-hacker-for-2015-bundestag-hack\/\" target=\"_blank\" rel=\"noopener noreferrer\">as Germany did earlier this year<\/a>&nbsp;against an APT28 member involved in the hack of its Parliament (the Bundestag) in 2015.<\/p>\n<p><a href=\"https:\/\/malpedia.caad.fkie.fraunhofer.de\/actor\/sofacy\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">The APT28 group<\/a>&nbsp;is also known in the cyber-security industry under other names, including Sofacy, Fancy Bear, Sednit, Strontium, and more. It is one of the most active Russian state-sponsored hacking groups, believed to have been involved in hacks against the Pentagon, the German Parliament, NATO, the DNC in 2016, the World Anti-Doping Agency, and many more. The group&#8217;s members are subject to many&nbsp;<a href=\"https:\/\/www.zdnet.com\/article\/us-charges-russian-military-officers-over-international-hacking-and-disinformation-campaigns\/\" target=\"_blank\" rel=\"noopener noreferrer\">indictments<\/a>&nbsp;and&nbsp;<a href=\"https:\/\/www.zdnet.com\/article\/eu-sanctions-russia-over-2015-german-parliament-hack\/\" target=\"_blank\" rel=\"noopener noreferrer\">international sanctions<\/a>.<\/p>\n<p>&#8220;Although we have not seen the activity mentioned in [the PST] report, during the last years, we have researched several Sofacy operations targeting entities in Scandinavian countries,&#8221; Costin Raiu, Director of the Kaspersky Global Research &amp; Analysis Team (GReAT), told <em>ZDNet<\/em>.<\/p>\n<p>&#8220;It is important to mention the activities we observed are not recent and date back to 2016-2018,&#8221; Raiu added.<\/p>\n<p>&#8220;Most recently, it would appear that Sofacy changed their TTPs, with a focus on credentials harvesting and then expanding access through cloud services and various network equipment, as opposed to their traditional endpoint infection ops. This makes them much harder to track and detect then before and especially way more difficult to attribute, due to lack of custom software artifacts,&#8221; the Kaspersky security researcher said.<\/p>\n<p><em>Article updated shortly after publication with comments from Kaspersky.<\/em><\/p>\n<p> READ MORE <a href=\"https:\/\/www.zdnet.com\/article\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\/#ftag=RSSbaffb68\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Russian hackers breached the Norway&#8217;s Parliament email accounts in August this year.<br \/>\nREAD MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":38584,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[62],"tags":[],"class_list":["post-38583","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-zdnet-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Norway says Russian hacking group APT28 is behind August 2020 Parliament hack 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Norway says Russian hacking group APT28 is behind August 2020 Parliament hack 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2020-12-08T14:42:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/12\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"500\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Norway says Russian hacking group APT28 is behind August 2020 Parliament hack\",\"datePublished\":\"2020-12-08T14:42:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\\\/\"},\"wordCount\":729,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/12\\\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack.jpg\",\"articleSection\":[\"ZDNet | Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\\\/\",\"name\":\"Norway says Russian hacking group APT28 is behind August 2020 Parliament hack 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/12\\\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack.jpg\",\"datePublished\":\"2020-12-08T14:42:00+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/12\\\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/12\\\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack.jpg\",\"width\":1000,\"height\":500},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Norway says Russian hacking group APT28 is behind August 2020 Parliament hack\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Norway says Russian hacking group APT28 is behind August 2020 Parliament hack 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\/","og_locale":"en_US","og_type":"article","og_title":"Norway says Russian hacking group APT28 is behind August 2020 Parliament hack 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2020-12-08T14:42:00+00:00","og_image":[{"width":1000,"height":500,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/12\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Norway says Russian hacking group APT28 is behind August 2020 Parliament hack","datePublished":"2020-12-08T14:42:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\/"},"wordCount":729,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/12\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack.jpg","articleSection":["ZDNet | Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\/","url":"https:\/\/www.threatshub.org\/blog\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\/","name":"Norway says Russian hacking group APT28 is behind August 2020 Parliament hack 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/12\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack.jpg","datePublished":"2020-12-08T14:42:00+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/12\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/12\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack.jpg","width":1000,"height":500},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/norway-says-russian-hacking-group-apt28-is-behind-august-2020-parliament-hack\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Norway says Russian hacking group APT28 is behind August 2020 Parliament hack"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/38583","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=38583"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/38583\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/38584"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=38583"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=38583"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=38583"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}