Cozy Bear Hacks: Russian Spies Just Won’t Quit Despite U.S. Pressure

Security researchers have uncovered a hacking campaign by suspected Russian spies, despite U.S. pressure on the Kremlin. RiskIQ Inc. identified over 30 servers used by the state-sponsored group APT29, or Cozy Bear, to deploy malicious software named WellMess.

Hot Take:

Looks like Cozy Bear’s New Year resolution was to be more “persistent” and “advanced” than ever! With 30 new command and control servers, it’s like they’re opening their own evil Starbucks chain. As the Kremlin keeps dodging U.S. pressure, these Russian spies are cozying up to our data more than a cat to a warm laptop.

Key Points:

  • Suspected Russian spies, known as APT29 or Cozy Bear, continue hacking despite U.S. pressure.
  • RiskIQ Inc. uncovered over 30 command and control servers linked to Cozy Bear.
  • These servers are used to deploy malicious software named WellMess.
  • APT29 is a state-sponsored hacking group known for its “advanced persistent threat” tactics.
  • The hacking campaign persists amid ongoing geopolitical tensions between the U.S. and Russia.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here