Threat actors, mapped by behavior.
Short profiles based on public reports and MITRE ATT&CK.
APT29 (Cozy Bear)
Cozy BearThe DukesNOBELIUM
Origin
Russia
Motivation
Espionage
Active Since
2008
Sophistication
Very High
Public reporting attributes this Russian state-sponsored group to sophisticated espionage campaigns, including the SolarWinds supply-chain compromise and targeting of COVID-19 vaccine research.
Target Sectors
GovernmentDefenseTechnologyHealthcare
Keep in mind: Threat actor names and links can be uncertain. This page uses public reports, which may change. Check official sources before acting.