Primitive Bear

Russian Federation

Details

PRIMITIVE BEAR is a targeted intrusion adversary operating from Simferopol, Crimea. This group is highly likely attributable to the Federal Security Service of the Russian Federation (also known as FSB, or Федеральная служба безопасности, abbreviated to ФСБ), assessed with high confidence. Identified targeting heavily indicates the adversary specifically focuses on operations against Ukrainian ins...

Community Identifiers

f1BisRgXvTGAeNY

Objective

  • xXYoO6TW3EbHBDctF25eRMI

Motivation

  • MH0DY5QjanCIyzs

Contact our team about
IOCs for this adversary

?

During a cybersecurity incident, indicators of compromise (IoC) are clues and evidence of a data breach.