What other aliases and vendor names is APT29 known by?

APT29 is tracked across the cybersecurity industry by multiple aliases, including: ATK7, Blue Kitsune, BlueBravo, Cloaked Ursa, COZY BEAR, CozyDuke, Dark Halo, G0016.

APT29

Q: What are the primary motivations and sponsors of APT29?

APT29 operates from Russia with primary motivation categorized as Strategic political and diplomatic espionage targeting government, intelligence, and high-value geopolitical entities., sponsored or affiliated with Russian Federation (SVR).

ACTIVE CAMPAIGN TRACKED ⚠ Critical Threat Russia

Primary Aliases: COZY BEAR Midnight Blizzard Nobelium UNC2452

Sponsor / State Affiliation Russian Federation (SVR)

Primary Motivation Strategic political and diplomatic espionage targeting government, intelligence, and high-value geopolitical entities.

Active Timeline Unknown – Present

Confidence Rating 95% (Grounded)

Midnight Blizzard Microsoft Breach, Cloud-Identity Targeting Operations

⚔️ Weaponized CVE Matrix (0)

No specific weaponized CVEs currently mapped in the public baseline.

🎯 Target Sectors & Focus

Government agencies Diplomatic organizations Cloud Service Providers (CSPs) Technology/Software companies Think tanks Non-Governmental Organizations (NGOs) Critical Infrastructure