ENERGETIC BEAR
RussiaState-sponsoredUnknown
Observation period
58
Techniques
0
Reports
- Latest observed activity
- No dated reports available
- First observed
- —
Profile
A Russian group that collects intelligence on the energy industry.
Relevance for Germany, Austria and Switzerland
high
Assessment based on target countries according to MISP Galaxy (CFR Cyber Operations Tracker).
Target sectors according to source
- Private sector
- Government
Target countries according to source United States, Germany, Turkey, China, Spain, France, Ireland, Japan, Italy, Poland
Aliases
- BERSERK BEAR
- ALLANITE
- CASTLE
- DYMALLOY
- TG-4192
- Dragonfly
- Crouching Yeti
- Group 24
- Havex
- Koala Team
- IRON LIBERTY
- ATK6
- ITG15
- BROMINE
- Blue Kraken
- Ghost Blizzard
MITRE ATT&CK techniques
Observed techniques per ATT&CK Enterprise and ICS. Each technique links to the ATT&CK knowledge base.
- T1560
- T1113
- T1564.002
- T1505.003
- T1204.002
- T1591.002
- T1078
- T1016
- T1584.004
- T1083
- T1136.001
- T1221
- T1203
- T1110.002
- T1608.004
- T1012
- T1566.001
- T1189
- T1583.001
- T1003.002
- T1598.002
- T1005
- T1070.004
- T1059
- T1685.005
- T1686
- T1112
- T1588.002
- T1195.002
- T1036.010
- T1003.003
- T1098.007
- T1583.003
- T1059.003
- T1071.002
- T1598.003
- T1053.005
- T1069.002
- T1114.002
- T1595.002
- T1547.001
- T1105
- T1133
- T1003.004
- T1190
- T1135
- T1110
- T1021.001
- T1187
- T1033
- T1074.001
- T1059.001
- T1210
- T1059.006
- T1018
- T1087.002
- T0817
- T0862
Software / tooling used
External references
- gov.ukgov.uk
- web.archive.orgweb.archive.org
- paper.seebug.orgpaper.seebug.org
- netresec.comnetresec.com
- threatpost.comthreatpost.com
- cfr.orgcfr.org
- reuters.comreuters.com
- dragos.comdragos.com
- independent.ieindependent.ie
- riskiq.comriskiq.com
- symantec-blogs.broadcom.comsymantec-blogs.broadcom.com
- kaspersky.comkaspersky.com
- sans.orgsans.org
- attack.mitre.orgattack.mitre.org
- secureworks.comsecureworks.com
- dragos.comdragos.com
- dragos.comdragos.com
- cfr.orgcfr.org