🇷🇺Russian APT
Russian Advanced Persistent Threat (APT) groups are known for their sophisticated cyber-espionage and cyber-attack capabilities. Here is a list of some prominent Russian APT groups:
Notable Russian APT Groups
APT28 (Fancy Bear, Sofacy, Sednit)
Affiliation: Russian GRU (military intelligence)
Targets: Government agencies, military organizations, media outlets, and political entities in various countries.
Notable Activities: Election interference, political espionage, attacks on NATO members, and widespread data breaches.
APT29 (Cozy Bear, The Dukes, Yttrium)
Affiliation: Russian FSB (Federal Security Service)
Targets: Government agencies, political organizations, think tanks, and academic institutions.
Notable Activities: High-profile breaches such as the 2016 Democratic National Committee (DNC) hack, political espionage, and data exfiltration.
APT30 (Tango Team, Pirate Panda)
Affiliation: Likely associated with Chinese interests but also linked to Russian operations.
Targets: Government and military organizations, especially in Southeast Asia.
Notable Activities: Cyber-espionage with a focus on military and defense sectors.
APT33 (Elfin, Magnallium)
Affiliation: Iranian group but involved in operations with connections to Russian interests.
Targets: Aerospace, energy, and petrochemical sectors.
Notable Activities: Industrial espionage and attacks on critical infrastructure.
APT34 (OilRig, Helix)
Affiliation: Iranian group but occasionally operates with Russian coordination.
Targets: Financial, energy, and telecommunications sectors.
Notable Activities: Espionage and data theft related to critical infrastructure.
Turla (Snake, Uroburos, Ouroboros)
Affiliation: Russian FSB (Federal Security Service)
Targets: Government agencies, diplomatic entities, military organizations, and other high-profile targets.
Notable Activities: Advanced espionage operations, data exfiltration, and deployment of sophisticated malware.
Sofacy (Fancy Bear, Sednit)
Affiliation: Russian GRU
Targets: Government, military, and media sectors.
Notable Activities: Espionage, data breaches, and political interference operations.
Sednit (Fancy Bear, Sofacy)
Affiliation: Russian GRU
Targets: Political organizations, military, and governmental entities.
Notable Activities: Persistent cyber-espionage campaigns and political data theft.
Smesharik (Sonic)
Affiliation: Russian intelligence
Targets: Primarily targeting Russian-speaking regions and political entities.
Notable Activities: Political espionage and data gathering.
GhostNet
Affiliation: Chinese but has been involved in Russian-linked operations.
Targets: Government and political organizations, especially in Asia.
Notable Activities: Espionage and data theft involving diplomatic and political targets
Last updated