SVR cyber actors adapt tactics for initial cloud access

February 2024

Crown Copyright 2024

Advisory

SVR cyber actors adapt

tactics for initial cloud

access

SVR cyber actors adapt tactics for

initial cloud access

How SVR-attributed actors are adapting to the move of

government and corporations to cloud infrastructure

Overview

This advisory details recent tactics, techniques and procedures (TTPs) of the group commonly known as APT29, also known as Midnight Blizzard, the Dukes or Cozy Bear.

The UK National Cyber Security Centre (NCSC) and international partners assess that APT29 is a cyber espionage group, almost certainly part of the SVR, an element of the Russian intelligence services. The US National Security Agency (NSA), the US Cybersecurity and Infrastruct…