russian_nation_state_actors
Russian nation-state actors are highly active in the global cyber threat landscape, with operations increasingly integrated into geopolitical conflicts. Their activities include cyberespionage, information operations, and collaboration with cybercriminal gangs. Russian actors have notably outsourced cyberespionage to criminal groups, particularly targeting Ukraine, and are expected to shift their operations toward long-term global objectives. Their campaigns focus on Europe and North America, leveraging information operations and hacktivist groups. Tactics include exploiting software supply chains, zero-day vulnerabilities, and virtualization platforms, as well as conducting ransomware, data theft, and combined extortion attacks. Russian actors are also experimenting with generative AI to enhance phishing, influence campaigns, and malware development. These operations are characterized by a blend of state and non-state collaboration, with a persistent focus on espionage, disruption, and influence aligned with Russian geopolitical interests. No specific sub-groups or aliases are mentioned in the provided content.
Know when an actor pivots toward your sector
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Recent activity
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Russian nation-state actors are expected to focus on global objectives, including information campaigns, hacktivism, election interference, and infrastructure disruption, particularly targeting Europe and North America.
Russian nation-state actors are increasingly collaborating with cybercriminal groups to conduct cyberespionage, particularly targeting Ukraine. They outsource operations and use commodity malware for intelligence gathering.
The version that knows your environment.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.