| SYMBOL | COMMON_NAME | aka. SYNONYMS |
A Russian group that collects intelligence on the energy industry.
| 2022-05-04 ⋅ Mandiant ⋅ Old Services, New Tricks: Cloud Metadata Abuse by UNC2903 WSO |
| 2022-04-05 ⋅ Government of United Kingdom ⋅ Russia's FSB malign activity: factsheet Energetic Bear |
| 2022-03-24 ⋅ CISA ⋅ Alert (AA22-083A) Tactics, Techniques, and Procedures of Indicted State-Sponsored Russian Cyber Actors Targeting the Energy Sector Havex RAT Triton |
| 2021-06-24 ⋅ Gigamon ⋅ The Baffling Berserk Bear: A Decade's Activity targeting Critical Infrastructure Havex RAT Heriplor Karagany |
| 2020-12-21 ⋅ IronNet ⋅ Russian cyber attack campaigns and actors WellMail elf.wellmess Agent.BTZ BlackEnergy EternalPetya Havex RAT Industroyer Ryuk Triton WellMess |
| 2020-11-04 ⋅ Stranded on Pylos Blog ⋅ The Enigmatic Energetic Bear EternalPetya Havex RAT |
| 2020 ⋅ SecurityWeek ⋅ IRON LIBERTY Havex RAT Karagany |
| 2019-07-24 ⋅ Secureworks ⋅ Resurgent Iron Liberty Targeting Energy Sector Energetic Bear TeamSpy Crew |
| 2019-07-24 ⋅ Secureworks ⋅ Updated Karagany Malware Targets Energy Sector Karagany |
| 2019-03-25 ⋅ Carnegie Mellon University ⋅ API Hashing Tool, Imagine That Heriplor |
| 2019 ⋅ Council on Foreign Relations ⋅ Crouching Yeti Energetic Bear |
| 2019 ⋅ MITRE ⋅ Group description: Dragonfly Energetic Bear |
| 2017-11-02 ⋅ RiskIQ ⋅ New Insights into Energetic Bear’s Watering Hole Cyber Attacks on Turkish Critical Infrastructure Energetic Bear |
| 2017-10-20 ⋅ Symantec ⋅ Dragonfly: Western energy sector targeted by sophisticated attack group Dorshel Heriplor Karagany Listrix |
| 2017-10-20 ⋅ Symantec ⋅ Dragonfly: Western energy sector targeted by sophisticated attack group Dorshel Goodor Heriplor Karagany Listrix Energetic Bear |
| 2017-10-20 ⋅ Symantec ⋅ Dragonfly: Western energy sector targeted by sophisticated attack group Energetic Bear |
| 2017-08-07 ⋅ Independent.ie ⋅ 'State-sponsored' hackers targeted EirGrid electricity network in 'devious attack' Energetic Bear |
| 2017-06-13 ⋅ Dragos ⋅ CRASHOVERRIDE Analysis of the Threat to Electric Grid Operations Energetic Bear |
| 2017-05-01 ⋅ Kaspersky Labs ⋅ Crouching Yeti (Energetic Bear) Malware Energetic Bear |
| 2017-01-18 ⋅ Reuters ⋅ Ukraine's power outage was a cyber attack: Ukrenergo Energetic Bear |
| 2016-01-22 ⋅ SANS ⋅ The Impact of Dragonfly Malware on Industrial Control Systems Energetic Bear |
| 2014-10-27 ⋅ Netresec ⋅ Full Disclosure of Havex Trojans Energetic Bear |
| 2014-07-07 ⋅ Symantec ⋅ Dragonfly: Cyberespionage Attacks Against Energy Suppliers Karagany Energetic Bear |
| 2014-07-07 ⋅ Symantec ⋅ Dragonfly: Cyberespionage Attacks Against Energy Suppliers Energetic Bear |
| 2014-06-23 ⋅ F-Secure ⋅ Havex Hunts For ICS/SCADA Systems Havex RAT |
| 2014-03-13 ⋅ Threatpost ⋅ Energy Watering Hole Attack Used LightsOut Exploit Kit Energetic Bear |