Threat actor · G0016

APT29

IRON RITUALIRON HEMLOCKNobleBaronDark HaloNOBELIUMUNC2452YTTRIUMThe DukesCozy BearCozyDukeSolarStormBlue KitsuneUNC3524Midnight Blizzard

RussiaSVR (Russian Foreign Intelligence Service)

APT29 is threat group that has been attributed to Russia's Foreign Intelligence Service (SVR). They have operated since at least 2008, often targeting government networks in Europe and NATO member countries, research institutes, and think tanks. APT29 reportedly compromised the Democratic National Committee starting in the summer of 2015.

MITRE ATT&CK Techniques

Associated Malware

AADInternalsAdFindBloodHoundBoomBoxCloudDukeCobalt StrikeCosmicDukeCozyCarEnvyScoutFatDukeFoggyWebGeminiDukeGoldFinderGoldMaxHAMMERTOSSImpacketLiteDukeMimikatzMiniDukeNativeZoneNetOnionDukePOSHSPYPinchDukePolyglotDukePowerDukePsExecQUIETEXITROADToolsRaindropRegDukeSDeleteSUNBURSTSUNSPOTSeaDukeSibotSliverSoreFangSysteminfoTEARDROPTasklistTorTrailBlazerVaporRageWellMailWellMessipconfigmeekreGeorg

Full MITRE ATT&CK profile

0 recent articles mention this actor

No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.