Primitive Bear

Russian Federation


PRIMITIVE BEAR is a targeted intrusion adversary operating from Simferopol, Crimea. This group is highly likely attributable to the Federal Security Service of the Russian Federation (also known as FSB, or Федеральная служба безопасности, abbreviated to ФСБ), assessed with high confidence. Identified targeting heavily suggests a targeting focus against Ukrainian institutions, particularly those re...

Community Identifiers



  • 2VZHvMiBYjwqCE37rxzFoJc


  • MPtb8Y4cd5BvEoQ

Contact our team about
IOCs for this adversary


During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.