What other aliases and vendor names is Callisto known by?

Callisto is tracked across the cybersecurity industry by multiple aliases, including: Bleeding Bear, Blue Callisto, BlueCharlie, Cadet Blizzard, Callisto Group, COLD RELIC, COLDRIVER, Dancing Salome.

Callisto

Q: What are the primary motivations and sponsors of Callisto?

Callisto operates from Russia with primary motivation categorized as Strategic intelligence collection supporting Russian foreign policy and military objectives, focusing on political, military, and economic secrets, sponsored or affiliated with Russian GRU (Main Directorate of the General Staff of the Armed Forces of the Russian Federation).

ACTIVE CAMPAIGN TRACKED ▲ High Threat Russia

Primary Aliases: Bleeding Bear Cadet Blizzard DEV-0586 DEV-0587

Sponsor / State Affiliation Russian GRU (Main Directorate of the General Staff of the Armed Forces of the Russian Federation)

Primary Motivation Strategic intelligence collection supporting Russian foreign policy and military objectives, focusing on political, military, and economic secrets

Confidence Rating 85% (Grounded)

Star Blizzard (SEABORGIUM) credential‑phishing against European think‑tanks, Cadet Blizzard (UNC2589) espionage campaign targeting Ukrainian government, COLDRIVER (Callisto Group) energy sector intrusion in North America