#
ESETresearch has analyzed the resurgence of Sednit – one of the most long‑running Russia‑aligned APT groups – now using a modern toolkit built around paired implants, BeardShell and Covenant, each using a different cloud provider for resilience.
welivesecurity.com/en/eset-res…ESET researchers tied Sednit’s advanced implant team reboot to a 2024 case in Ukraine, where SlimAgent emerged – a keylogger built on the codebase of the infamous Xagent, Sednit’s flagship 2010-era backdoor.
Sednit also deployed BeardShell, an implant that executes PowerShell commands via a legitimate cloud service and uses a distinctive obfuscation technique also found in Xtunnel, Sednit’s network pivoting tool from the 2010s.
Across 2025–2026, Sednit paired BeardShell with Covenant, the final block of its modern toolkit – a heavily reworked open-source implant built for long‑term espionage with a new protocol riding on another legitimate cloud provider.
Detailed analysis of Sednit’s modern toolkits is available at
welivesecurity.com/en/eset-res…ESET researchers document how the Sednit APT group has reemerged with a modern toolkit centered on two paired implants – BeardShell and Covenant.
www.welivesecurity.com
Western Infidels
in reply to ProPublica • • •Hypolite Petovan
in reply to Western Infidels • • •Scale Theory
in reply to ProPublica • • •Jeff Atwood
in reply to ProPublica • • •Initial Frequently Asked Questions
Jeff Atwood (Rural Guaranteed Minimum Income Initiative • RGMII)mbbrutman
in reply to ProPublica • • •I just went through this recently with an obvious case of identity theft. Experian allowed me to open a dispute, then closed it two days later saying "Nope, it was you." They offered no evidence to support the claim.
There seem to be a lot of smaller, regional banks who will let people open accounts online with little to no identity checks. Worse, some of these are checking and savings accounts so they are not even showing up on credit reports.
fuzzyfuzzyfungus
in reply to ProPublica • • •vxo
in reply to fuzzyfuzzyfungus • • •Sensitivityi
in reply to ProPublica • • •James Widman
in reply to Sensitivityi • • •Darwin Woodka
in reply to ProPublica • • •Tracking Token Disrespector
in reply to ProPublica • • •🤖 Tracking strings detected and removed!
🔗 Clean URL(s):
propublica.org/article/credit-…
❌ Removed parts:
?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon-post
Credit Bureaus Are Leaving More Mistakes on Frustrated Consumers’ Reports Under Trump’s CFPB
Joel Jacobs (ProPublica)