White Bear is a cyber espionage operation or subgroup within the Russian state-sponsored Turla advanced persistent threat (APT) group. It emerged around February 2016, initially focusing its activities on embassies and consular operations globally, later expanding its targeting to include defense-related organizations. The group's primary motivation is long-term cyber espionage, serving Russian geopolitical, military, and diplomatic interests. White Bear is distinguished by its deployment of sophisticated custom malware, its capability to leverage zero-day vulnerabilities, and its advanced operational security practices, notably including the hijacking of satellite communications for stealthy command and control. The group has also been observed taking over infrastructure from other APTs for its own campaigns. White Bear is a name used by Kaspersky to identify a specific Turla campaign. While often associated with or compared to other Russian state-sponsored groups like APT28 (Fancy Be

Aliases del actor

Skipper TurlaKopiluwakestá vinculado al grupo Turla

Actores similares

APT29 (Cozy Bear)actor · 1Saint Bearactor · 1energetic-bearactor · 1ember-bearactor · 1Energetic Bearapt · 0Boulder Bearapt · 0Pat Bearapt · 0Turlaactor · 1turla-groupactor · 1whitebearactor · 1