STRONTIUM

Actor Type Nation State
Attributed to Nation Russia
Directly Linked Intrusion Sets Forest Blizzard , Fancy Bear , APT28 , ITG05
Associated Threat Actor GRU Unit 26165

STRONTIUM, also known as Fancy Bear or APT28, is a cyber espionage group historically tracked by Microsoft. It is believed to be associated with Russian military intelligence (GRU). The group focuses on government, military, security organizations, and other high-profile entities. It engages in sophisticated cyber operations, including hacking and data exfiltration.

Microsoft subsequently changed their naming taxonomy, renaming the group as Forest Blizzard.

Cyber Threat Graph Context

Explore how this Intrusion Set relates to the wider threat graph

References