Winter Vivern is a cyber espionage group that first emerged in 2020 and is assessed to operate with objectives aligned with Russian and Belarusian government interests. The group primarily focuses on political and military targets, demonstrating a consistent motivation for intelligence gathering and information theft. What sets Winter Vivern apart is its adaptive and resourceful approach, often achieving significant compromises with relatively limited resources, frequently exploiting vulnerabilities in widely used webmail services and public-facing applications. The group is also known by various aliases including TA473, TAG-70, and UAC-0114, which are sometimes used interchangeably by different security researchers.