Energetic Bear — Threat Actor Profile, Campaigns & Targets

Threat entity extracted from intelligence sources

Frequency
13
occurrences
First Seen
July 13, 2026
Last Seen
July 14, 2026

Energetic Bear is a apt_group tracked across 2 threat clusters and 13 intelligence report mentions on ThreatCluster. First observed July 13, 2026; most recent activity July 14, 2026.

Related Threat Clusters

  • Russian FSB Exploits Vulnerable Routers to Target Critical Infrastructure

    A joint advisory from 21 global cybersecurity agencies warns that Russian state hackers from the FSB's Center 16 are exploiting poorly configured routers to infiltrate critical infrastructure networks worldwide. The…

    72 articles · Updated July 13, 2026
  • EU Sanctions Russia Over Ongoing Cyber Espionage Campaign

    The European Union has condemned and sanctioned Russia for a prolonged cyber espionage campaign targeting its member states. The campaign, orchestrated by the 16th Centre of the FSB, has involved infiltrating government…

    155 articles · Updated July 13, 2026

Recent Intelligence Reports

  • Cisco Talos, which tracks the same group under the alias Static Tundra — blog.talosintelligence.com · July 14, 2026
  • Governments to enterprises: Improve your router security hygiene — Csoonline · July 14, 2026
  • US Government Warns That Russia State Hackers Are Coming After Your Router — Rss.Slashdot · July 13, 2026
  • Officials once again warn defenders that Russian hackers are targeting network devices — Cyberscoop · July 13, 2026
  • Weak Security Continues to Fuel Russian Cyberattacks — Darkreading · July 13, 2026
  • FSB Center 16 Exploited Default Router Passwords to Map Critical Infrastructure for Years — Techtimes · July 13, 2026
  • Russian State — Darkwebinformer · July 13, 2026
  • NCSC urges critical sectors to strengthen defences against FSB attacks — Computing · July 13, 2026

CVSS v3.1 Breakdown