UNC2452, also known as SolarWinds hackers, StellarParticle, Solar Phoenix, Dark Halo, and identified by Mandiant as APT29 (Cozy Bear), first emerged with activity observed as early as September 2019, though their actions became publicly known in December 2020. This highly skilled group, assessed with high confidence to be of Russian origin and sponsored by the Russian Foreign Intelligence Service (SVR), is primarily motivated by espionage. A defining characteristic of UNC2452 is its orchestration of the sophisticated SolarWinds supply chain compromise, where malicious code was injected into legitimate software updates, demonstrating an unparalleled level of stealth and operational security. The group's activities reflect an evolution towards exploiting trusted vendor relationships and targeting cloud environments to achieve its intelligence-gathering objectives.

Aliases del actor

StellarParticleSolar PhoenixDark HaloNobeliumSilver Fishla penetración de sistemas críticos

Actores similares

SilverFishapt · 0DarkWebInformeractor · 11DailyDarkWebactor · 11alphalockeractor · 3darkangelsransomware · 2darkbitransomware · 2darkleakmarketransomware · 2darkraceransomware · 2darkpowerransomware · 2darkvaultransomware · 2