Threat actor
threat_actor:fancy_bear
Also: APT28
A Russian hacker group also called APT28 and discussed as potentially the same or a separate group from Sandworm.
A Russian hacker group also called APT28 and discussed as potentially the same or a separate group from Sandworm.
“Sandworm was Fancy Bear, APT28”
“It might be the same group as Fancy Bear. We don’t know.”
Sandworm POSSIBLY_SAME_AS Fancy Bear
The episode presents Sandworm and Fancy Bear as possibly the same group, but explicitly says this is not known.
Uncertain Confidence 98% · Jack Rhysider EP 54 Details
“It might be the same group as Fancy Bear. We don’t know.”