russian_state_sponsored_actors
The content references Russia as a foreign adversary conducting cyber operations, specifically citing a 2022 Russian-attributed cyberattack against Viasat’s KA-SAT satellite network that disrupted service for tens of thousands of European customers and impacted Ukraine. The material characterizes Russia as part of a broader set of hostile nation-state actors (alongside China, Iran, and North Korea) targeting U.S. and allied interests, including commercial satellite networks and other IT/OT environments. No specific Russian threat actor unit names, aliases, sub-groups, tooling, or detailed TTPs are provided beyond the attribution to Russia for the KA-SAT incident and the general framing of Russia as an adversary in the cyber threat landscape.
Know when an actor pivots toward your sector
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Recent activity
4 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Russian state-sponsored actors are known for conducting disruptive cyberattacks against satellite communications infrastructure, notably the 2022 attack on Viasat’s KA-SAT satellite, which impacted European customers and Ukraine.
Russian state-sponsored actors are actively engaged in cyber operations targeting U.S. critical infrastructure, often collaborating with other hostile nation-states and leveraging advanced technologies.
Russian state-sponsored threat actors are employing AI-generated deepfakes to support cyber operations, including social engineering, phishing, and information warfare.
Previously exploited VMware vulnerabilities for espionage or cyber operations, particularly those reported by NSA as having national security implications.
The version that knows your environment.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.