Primitive Bear
Discover the adversaries targeting your industry
PRIMITIVE BEAR is a targeted intrusion adversary operating from Simferopol, Crimea. This group is highly likely attributable to the Federal Security Service of the Russian Federation (also known as FSB, or Федеральная служба безопасности, abbreviated to ФСБ), assessed with high confidence. Identified targeting heavily indicates the adversary specifically focuses on operations against Ukrainian ins...
-
Primitive Bear
-
Russian Federation, Eastern Europe, Europe
Community Identifiers
ACTINIUM, BlueAlpha, WINTERFLOUNDER, IRON TILDEN, UAC-0010, Shuckworm, Operation Armageddon, TEMP.Armageddon, UNC530, Aqua Blizzard, Blue Otso, SpiceyHoney Campaign, Gamaredon, Trident Ursa, APT-C-53
Objective
Intelligence Gathering
Motivation
State-Sponsored
CrowdStrike 2026 Threat Hunting Report
Get insights from frontline experts.