Russian Foreign Intelligence Service (SVR) group known for sophisticated long-term intrusions into government and defense networks. Responsible for the SolarWinds supply chain attack.
Also known as: apt29, cozy bear, nobelium, midnight blizzard, the dukes, iron hemlock, yttrium, dark halo
Storm-2945, a Midnight Blizzard subcluster, has resumed CaptiveCrunch, an espionage campaign abusing hospitality Wi-Fi networks to infect travelers and compr...
Hotel Wi-Fi phishing campaign targets business travelers, Microsoft warns.
Midnight Blizzard, the Russian threat actor tied to the country’s foreign intelligence service, has spent months targeting users of public Wi-Fi networks at ...
Microsoft has linked a global campaign targeting hospitality Wi-Fi networks to the Russian threat actor Midnight Blizzard, also known as APT29. [.
Russian actor Storm-2945 hijacked hotel captive portals to push fake updates and steal tokens
Midnight Blizzard has been stealing Microsoft account credentials via compromised Wi-Fi networks at hospitality organizations. The post Russian State APT Lin...
Storm-2945, a sub-cluster of the Russian threat actor Midnight Blizzard, has been observed compromising the sign-in portals of hospitality-related organizati...