Cozy Bear — Threat Actor Profile, Campaigns & Targets

Threat entity extracted from intelligence sources

Frequency
9
occurrences
First Seen
November 20, 2025
Last Seen
June 15, 2026

Cozy Bear is a apt_group tracked across 8 threat clusters and 9 intelligence report mentions on ThreatCluster. First observed November 20, 2025; most recent activity June 15, 2026.

Related Threat Clusters

Recent Intelligence Reports

  • Azerbaijan's New Cybersecurity Agency Targets Rising Russian and Iranian Digital Threats — United24Media · June 15, 2026
  • Azerbaijan establishes National Cybersecurity Agency to protect against attacks of Russian ... - УНН — Unn.Ua · June 14, 2026
  • ESET APT Reports — www.globenewswire.com · May 28, 2026
  • Bitdefender GravityZone: 100% Telemetry in AV — Bitdefender · May 15, 2026
  • Bitdefender GravityZone: 100% Telemetry in AV — Bitdefender · May 14, 2026
  • ESET Threat Intelligence — www.eset.com · May 7, 2026
  • Russian hackers exploit Zimbra flaw in Ukrainian govt attacks — Bleepingcomputer · March 19, 2026
  • Silver Fox APT Targets China with ValleyRAT via Fake Teams Installers — Webpronews · December 4, 2025

CVSS v3.1 Breakdown