Ember Bear
Discover the adversaries targeting your industry
Back to Adversary Universe
EMBER BEAR is a Russia-based adversary assessed with moderate confidence to be attributable to the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (Главное разведывательное управление, abbreviated to ГРУ/GRU). Specific targeted intrusion activity conducted by EMBER BEAR has been attributed by Western intelligence agencies to Military Unit 29155 (a.k.a. 161st Spe...
-
Ember Bear
-
Russian Federation, Eastern Europe, Europe
Community Identifiers
UNC2589, Saint Bear, Nascent Ursa, Frozen Vista, DEV-0586, Cadet Blizzard, UAC-0056, Lorec53, Lorec Bear, Bleeding Bear
Objective
Intelligence Gathering, defacement, Destruction
Motivation
State-Sponsored
Who's targeting your industry?
Today's adversaries are faster, smarter, and better resourced. Know who they are and how to stop them.
View adversaries
CrowdStrike 2025 Threat Hunting Report
Adversaries weaponize and target AI at scale.
