# Sednit reloaded: Back in the trenches

DevFeed: [Sednit reloaded: Back in the trenches](<https://devfeed.tech/articles/sednit-reloaded-back-in-the-trenches-8382.md>)

Original publisher: [Read original article](<https://www.welivesecurity.com/en/eset-research/sednit-reloaded-back-trenches/>)

Author: ESET Research

Published: 2026-03-10T09:58:00Z

Content type: article

Language: en

Sources: [WeLiveSecurity](<https://devfeed.tech/sources/welivesecurity.md>)

Topics: [apt](<https://devfeed.tech/topics/apt.md>), [Cloud](<https://devfeed.tech/topics/cloud.md>), [obfuscation](<https://devfeed.tech/topics/obfuscation.md>), [PowerShell](<https://devfeed.tech/topics/powershell.md>), [Code](<https://devfeed.tech/topics/code.md>), [Network](<https://devfeed.tech/topics/network.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>)

Tags: [apt](<https://devfeed.tech/tags/apt.md>), [attacks](<https://devfeed.tech/tags/attacks.md>), [backdoor](<https://devfeed.tech/tags/backdoor.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [code](<https://devfeed.tech/tags/code.md>), [department-of-justice](<https://devfeed.tech/tags/department-of-justice.md>), [eset-research](<https://devfeed.tech/tags/eset-research.md>), [network](<https://devfeed.tech/tags/network.md>), [obfuscation](<https://devfeed.tech/tags/obfuscation.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [powershell](<https://devfeed.tech/tags/powershell.md>), [us](<https://devfeed.tech/tags/us.md>)

## AI overview

This article examines the resurgence of Sednit, also known as APT28, and its modern espionage toolkit. It describes the BeardShell and Covenant implants, their use of legitimate cloud providers for command and control and resilience, PowerShell execution, obfuscation, and links to Sednit's earlier tools and operations.

## Source excerpt

The resurgence of one of Russia's most notorious APT groups