Cozy Bear
Cozy Bear (Wikipedia) (also known as APT29, Midnight Blizzard, or Nobelium) is a highly sophisticated Russian advanced persistent threat (APT) hacking group believed to be affiliated with the Russian Foreign Intelligence Service (SVR).
-
In early 2020, a routine software update for SolarWinds’ Orion contained hidden malware, SUNBURST, leading to a global cyber-espionage campaign. Discovered by FireEye in December 2020, the breach highlighted vulnerabilities in trust and supply chains, with attackers, linked to Russian intelligence, exploiting a single vendor to access numerous networks for strategic data gathering.
Chronicles of Compromise 