Skip to content

CyberSIXT Search

Threat actor · coverage timeline

ENERGETIC BEAR

10 articles from 7 outlets between 13 Jul and 23 Oct. First reported by Infosecurity. The busiest day was Fri 16 Oct, with 6 articles.

Articles: 10; all time · from 7 outlets
Days with coverage: 5; across 103 days
Busiest day: 6; articles on Fri 16 Oct
Last 7 days: 0.3a day; vs 0.1 a day before
First report: 13 Jul; Infosecurity
CVEs named: 3; 3 in CISA KEV · in these articles

Coverage over time

10 articles · 13 Jul – 23 Oct

13 JulFirst report13 Jul · Infosecurity

Show as table

ENERGETIC BEAR: articles per day
Day (UTC)	Articles	Outlets
Mon 13 Jul	1	Infosecurity 1
Thu 15 Oct	1	Google Cloud 1
Fri 16 Oct	6	The Hacker News 1, SecurityOnline 1, Infosecurity 1, SecurityWeek 1, SOCRadar 1, Dark Reading 1
Wed 21 Oct	1	The Hacker News 1
Fri 23 Oct	1	SecurityOnline 1

Articles

10 articles

Fri 23 Oct1 article

07:26
Sophos Uncovers BRONZE SANDCASTLE Using Sandboxie to Load MalwareSecurityOnline

Wed 21 Oct1 article

12:58
China Aligned Bronze Sandcastle Uses DLL Sideloading to Spy on OrganisationsThe Hacker News

Fri 16 Oct6 articles

20:58
China-linked hackers exploited BeyondTrust zero-day to steal credentialsDark Reading
14:25
BeyondTrust Patches Zero-Day Flaw Used to Gain Root AccessSOCRadar
10:59
Chinese APT exploited BeyondTrust Remote Support flaw to steal filesSecurityWeek
10:22
China-Linked Hackers Exploited BeyondTrust Flaw to Install Root BackdoorInfosecurity
09:08
BeyondTrust Patches Remote Access Flaw Exploited to Steal CredentialsSecurityOnline
07:56
China Linked Hackers Exploited BeyondTrust Zero Day to Steal CredentialsThe Hacker News

Thu 15 Oct1 article

21:49
China Linked ARMORY CASTLE Exploited BeyondTrust Flaw as a Zero DayGoogle Cloud

Mon 13 Jul1 article

10:51
UK, EU sanction Russian hackers using weak SNMP router passwordsInfosecurity · first report