ClassicBrechasMapaActoresTTP MatrixAnaliticaAlertasCyberNewsArsenalExploitsKillChainOrigenSSLBLRansomLookRansomwhere
Energetic Bear
0 incidentes
0 paises
0 sectores
apt RU Ultimo: -
Aliases: ALLANITE, ATK6, BERSERK BEAR, BROMINE, Blue Kraken, CASTLE, Crouching Yeti, DYMALLOY, Dragonfly, G0035, Ghost Blizzard, Group 24, Havex, IRON LIBERTY, ITG15, Koala Team, TG-4192, crouching yeti
Energetic Bear, also known by numerous aliases including Dragonfly and Crouching Yeti, is a highly persistent cyber espionage group attributed to Russian state interests, specifically with links to both the GRU and FSB. Emerging around 2010, the group has consistently focused on intelligence gathering, particularly within critical infrastructure sectors globally. Its operations are distinguished by a blend of long-term access, persistent surveillance, and the capability to disrupt industrial control systems, making it a significant geopolitical threat beyond traditional espionage. Unlike some groups, Energetic Bear's defining characteristic is its deep and sustained targeting of the energy sector and associated industrial control systems, aiming to map networks, steal strategic documents, and exfiltrate operational data, often without immediate disruptive intent but with the underlying capability for sabotage.