Cozy Bear

Russian Federation


COZY BEAR is a Russia state-nexus adversary, assessed as likely to be acting on behalf of the Foreign Intelligence Service of the Russian Federation (also known as SVR or Служба внешней разведки Российской Федерации, abbreviated to СВР РФ). It is currently unknown whether COZY BEAR operations are directly performed by a department of SVR, or by an external organization such as a contracting compan...

Community Identifiers



  • 9QmKUg1uLVbty5B8rjAv6oW


  • fuEeMrmTpDB4tj7

Contact our team about
IOCs for this adversary


During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.