CrowdStrike 2026 Global Threat Report: The definitive threat intelligence report for the AI era Download report
Primitive Bear
Discover the adversaries targeting your industry
Back to Adversary Universe
PRIMITIVE BEAR is a targeted intrusion adversary operating from Simferopol, Crimea. This group is highly likely attributable to the Federal Security Service of the Russian Federation (also known as FSB, or Федеральная служба безопасности, abbreviated to ФСБ), assessed with high confidence. Identified targeting heavily indicates the adversary specifically focuses on operations against Ukrainian ins...
-
Primitive Bear
-
Russian Federation, Eastern Europe, Europe
Community Identifiers
Blue Otso, WINTERFLOUNDER, Trident Ursa, UAC-0010, SpiceyHoney Campaign, IRON TILDEN, UNC530, Shuckworm, Aqua Blizzard, Gamaredon, Operation Armageddon, APT-C-53, ACTINIUM, BlueAlpha, TEMP.Armageddon
Objective
Intelligence Gathering
Motivation
State-Sponsored
Who's targeting your industry?
Today's adversaries are faster, smarter, and better resourced. Know who they are and how to stop them.
View adversaries
CrowdStrike 2025 Threat Hunting Report
Adversaries weaponize and target AI at scale.
