Boulder Bear is a cyber espionage threat actor believed to operate from Eastern Europe, with a suspected state sponsorship from Russia. This group specializes in intelligence gathering against government and defense sectors, demonstrating a consistent application of advanced persistent threat tactics. Boulder Bear gains initial access through complex spear-phishing campaigns and by exploiting zero-day vulnerabilities. The group maintains a highly organized operational structure focused on intelligence collection and rapid adaptation to security measures. While information about this specific designation, reportedly used by CrowdStrike, remains limited in public reporting, its operations are characterized by obfuscation and the use of remote access tools.

Actores similares

APT29 (Cozy Bear)actor · 1Saint Bearactor · 1energetic-bearactor · 1ember-bearactor · 1Energetic Bearapt · 0Pat Bearapt · 0White Bearapt · 0spacebearsransomware · 28space-bearsactor · 12apt-noisybearactor · 1