Voodoo Bear is a apt_group tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed May 14, 2026; most recent activity May 14, 2026.
The Russian state-sponsored group Sandworm has intensified its cyber operations against industrial and critical infrastructure, utilizing pre-compromised operational technology (OT) environments instead of zero-day…