Gossamer Bear

Russian Federation


GOSSAMER BEAR is a likely Russian state-nexus adversary that has conducted credential collection campaigns since 2014 that target government, military, and media entities with a particular focus on organizations operating within Ukraine, or those that have links with the country. The adversary has also engaged in consistent targeting of UK government organizations and associated entities since 201...

Community Identifiers



  • uiKC6clak7OX3jR1tNbVIgS


  • XsYgrSlFneZofGC

Contact our team about
IOCs for this adversary


During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.