Latest Intelligence
How VOODOO BEAR Wiped a Grain Firm Using Microsoft Tools
A Russia-aligned group held a Ukrainian grain company for weeks, then handed it to VOODOO BEAR for the wipe. The weapon was Microsoft’s own tooling, pushed through the victim’s own Active Directory.
FANCY BEAR is Mapping How Fast NATO Can Rebuild
A GRU actor spent two months inside a NATO naval shipbuilder, reached a law enforcement agency and an aircraft engine maker alongside it, and did it with a Word macro and off-the-shelf tools. The prize was never the fleet. It was the industrial base deciding how fast the alliance can rebuild.
Silent Lynx Reads Russia’s Mail From Inside the Alliance
Recorded Future and Cisco tie the espionage actor Silent Lynx, at moderate confidence, to Kazakhstan, a member of Russia’s own security and economic blocs. Its targets read like a Kazakh intelligence requirements list, Russia, Belarus, and Central Asian neighbors timed to Kazakhstan’s own diplomacy.
Russia Built a Factory for Hackers That Just Leaked
Everyone tracks Fancy Bear and Voodoo Bear like weather systems. A leak just exposed the hidden Russian university department that manufactures them, a military cyber academy funneling graduates straight into GRU units. You cannot sanction a curriculum. The war was decided in the admissions office.
Cozy Bear Taught an AI to Rebuild Its Malware Every Time Its Detected
Russia's Cozy Bear used AI to watch its own malware and rebuild it the instant a security product flags it, over and over, in seconds. Detection used to impose a cost. Now the machine just regenerates until nothing catches it. The static-indicator layer never stood a chance.