Threat actor
Midnight Blizzard
Russia
Tracked by CyberSIXT since 1 Sep 2025
- Articlesall time
- 4
- Articleslast 30 days
- 0
- CVEs exploitedattributed · all time
- 0
- Research reportsall time
- 0
10 articles from 4 outlets since 1 Sep 2025; the latest 45 days ago.
- Article
Show as table
Connections
6 toolsNames and sources
- UNC2452
- CyberSIXT coverage, Malpedia, MISP Galaxy
- APT29
- Malpedia
- Cozy Bear
- Malpedia
- DarkHalo
- Malpedia, MISP Galaxy
- Midnight Blizzard
- Malpedia, MISP Galaxy
- NOBELIUM
- Malpedia, MISP Galaxy
- Solar Phoenix
- Malpedia, MISP Galaxy
- StellarParticle
- Malpedia, MISP Galaxy
Attributed facts
- Origin
Russia MISP Galaxy
Malware and tools
MITRE ATT&CK® techniques
No MITRE ATT&CK® techniques are recorded for Midnight Blizzard.
- Russian Hackers Used AI to Rebuild Malware After DetectionThe Hacker News
- Anthropic Warns AI Agents Are Powering Global CyberattacksThe Hacker News
- Russian Hackers Used Claude to Evade Detection in Spy CampaignSecurityWeek
- Russian State Hackers Use OAuth Phishing to Target DiplomatsSecurity Affairs
- CaptiveCrunch Malware Campaign Hijacks Hotel Wi-Fi WorldwideSecurityOnline
- APT29 hijacks hotel Wi‑Fi to spy on travelers via fake updatesInfosecurity
- Russian hackers hijack public WiFi to steal Microsoft 365 loginsSecurityWeek
- Russian Hackers Hijack Hotel Wi-Fi to Steal Microsoft 365 TokensSecurity Affairs
- Midnight Blizzard Offshoot Hits Travellers With CaptiveCrunchMicrosoft
- Amazon disrupts Russian APT29 hackers targeting Microsoft 365BleepingComputer · first in our coverage