CrowdStrike 2026 Global Threat Report: The definitive threat intelligence report for the AI era Download report
Cozy Bear
Discover the adversaries targeting your industry
Back to Adversary Universe
COZY BEAR is a Russia state-nexus adversary, assessed as likely to be acting on behalf of the Foreign Intelligence Service of the Russian Federation (also known as SVR or Служба внешней разведки Российской Федерации, abbreviated to СВР РФ). It is currently unknown whether COZY BEAR operations are directly performed by a department of SVR, or by an external organization such as a contracting compan...
-
Cozy Bear
-
Russian Federation, Eastern Europe, Europe
Community Identifiers
IRON HEMLOCK, Blue Kitsune, CozyCar, JACKMACKEREL, Cloaked Ursa, NobleBaron, YTTRIUM, NOBELIUM, The Dukes, CozyDuke, IRON RITUAL, UAC-0029, Midnight Blizzard, APT29, Office Monkeys, Dark Halo
Objective
Intelligence Gathering
Motivation
State-Sponsored
Who's targeting your industry?
Today's adversaries are faster, smarter, and better resourced. Know who they are and how to stop them.
View adversaries
CrowdStrike 2025 Threat Hunting Report
Adversaries weaponize and target AI at scale.
