What other aliases and vendor names is UNC2452 known by?

UNC2452 is tracked across the cybersecurity industry by multiple aliases, including: APT29, ATK7, Blue Kitsune, BlueBravo, Cloaked Ursa, COZY BEAR, CozyDuke, Dark Halo.

UNC2452

Q: What are the primary motivations and sponsors of UNC2452?

UNC2452 operates from Russia with primary motivation categorized as Strategic intelligence collection, including political, diplomatic, and security-related data to support Russian national interests., sponsored or affiliated with SVR (Russian Foreign Intelligence Service).

ACTIVE CAMPAIGN TRACKED ⚠ Critical Threat Russia

Primary Aliases: APT29 COZY BEAR Midnight Blizzard NOBELIUM

Sponsor / State Affiliation SVR (Russian Foreign Intelligence Service)

Primary Motivation Strategic intelligence collection, including political, diplomatic, and security-related data to support Russian national interests.

Active Timeline Unknown – Present

Confidence Rating 95% (Grounded)

Microsoft Corporate Breach (Midnight Blizzard), Global Cloud Identity Targeting

⚔️ Weaponized CVE Matrix (0)

No specific weaponized CVEs currently mapped in the public baseline.

🎯 Target Sectors & Focus

Cloud service providers Governmental organizations Diplomatic missions Technology and software vendors Think tanks Non-governmental organizations (NGOs)