Skip to content

APT Profile – Energetic Bear

About Energetic Bear

Energetic Bear is a state-integrated group (military intelligence service/agency members): The United States Cybersecurity and Infrastructure Security Agency (CISA) and the US Department of Justice (DoJ) referred to Energetic Bear as a “Russian state-sponsored APT actor” ([10]), citing target selection and aimed intelligence-gathering as strong indicators ([5]). According to Symantec, Energetic Bear displays a sufficiently high degree of technical capability which also assumes that the group is able to draw on state resources, both human and material. Additionally, as reported by Crowdstrike, the target selection of the group seems to align very closely with the likely information collection priorities of the Russian foreign, domestic, and military intelligence services; the SVR, FSB and GRU respectively.

Associated APT designations

Country of origin

Period of activity

Since at least 2010

More APT profiles

  • Research and Analysis
APT Profile – UNC1151

May 25, 2023
Technical and contextual characteristics of the UNC1151 group are analysed in this APT Profile from the EuRepoC team
Load More

End of Content.

Welcome to our Cyber Incident Dashboard!

For best results, please view on a desktop device.