Actor: Fancy Bear — Threat Intelligence

STRONTIUM: A profile of a persistent and motivated adversary

2015-11-19 ⚑ Sofacy

20

IOCs

Sofacy APT hits high profile targets with updated toolset

2015-12-04

—

IOCs

Sofacy APT hits high profile targets

2015-12-04 ⚑ Sofacy

13

IOCs

Intrusion into the Democratic National Committee

2016-06-14 ⚑ APT 29

13

IOCs

Fancy Bear domains

2016-07-07 ⚑ Sofacy

60

IOCs

Tunnel of Gov: DNC Hack and the Russian XTunnel

2016-08-01

—

IOCs

Sofacys Komplex OS X Trojan

2016-09-26 ⚑ Sofacy

10

IOCs

En Route with Sednit

2016-10-20 ⚑ Sofacy

114

IOCs

Fancy Bear, CyberBerkut targeting journalists

2016-10-20

—

IOCs

Sednit Downloader DOWNDELPH

2016-10-27 ⚑ Sofacy

17

IOCs

Pawn Storm Ramps Up Spear-phishing Before Zero-Days Get Patched

2016-11-09 ⚑ Sofacy

20

IOCs

Let It Ride: The Sofacy Group’s DealersChoice Attacks Continue

2016-12-16 ⚑ Sofacy

27

IOCs

Fancy Bear Tracking of Ukrainian Field Artillery Units

2016-12-22 ⚑ Sofacy

2

IOCs

Technical details on the Fancy Bear Android malware (poprd30.apk)

2017-01-03 ⚑ Fancy Bear

—

IOCs

A Pretty Dope Story About Bears: Early Indicators of Continued WADA Targeting

2017-01-15 ⚑ APT28

—

IOCs

How Cyber Propaganda Influenced Politics in 2016

2017-03-30 ⚑ Sofacy

67

IOCs

ThreatConnect Reviews Potential Fancy Bear Activity Targeting the French Election Runoff

2017-04-27 ⚑ Sofacy

10

IOCs

New variants of Agent.BTZ (linked w/ Turla & Fancy Bear) still active

2017-09-14

—

IOCs

Cyber Conflict Decoy Document Used In Real Cyber Conflict

2017-10-22 ⚑ Sofacy

7

IOCs

Fancy Bear Pens the Worst Blog Posts Ever

2017-11-02 ⚑ Sofacy

92

IOCs