Fancy Bear

Use the mouse wheel or two fingers (on touchscreens) to zoom in and out of the map.

Export map as:

Research this topic

Explore the main themes, entities and connections around Fancy Bear. Start with the topic map, then use the sections below for research and deeper semantic analysis.

Explore this topic

Start with a few of the strongest sections from the source topic. These are research directions, not a list of keywords you must use.

Attacks

Georgia Caucasus Academi Science Applications International Corporation Mikhail Khodorkovsky

129 related topics

Characteristics and techniques

Spam filters Toolkits Obfuscate their code Forensic analysis Small office/home office

8 related topics

Discovery and security reports

Trend Micro Pawn storm FireEye Hacking Microsoft Windows

11 related topics

Overview

Cyber espionage CrowdStrike GRU Foreign and Commonwealth Office SecureWorks

24 related topics

Key facts & relationships

High-confidence facts extracted from structured source data. Use them as anchors for further research.

Affiliations: Cozy Bear
Formation: c. 2004–2007[a]
Formerly called: APT28 · Pawn Storm · Sofacy Group · Sednit · STRONTIUM
Methods: Zero-days, spearphishing, malware
Official language: Russian
Parent organization: GRU

Topics to explore

Browse the full topic structure. Each item opens a new analysis centered on that subject.

Characteristics and techniques

Spam filters Spam filter
Toolkits
Obfuscate their code Data masking
Forensic analysis Digital forensics
Small office/home office
DNS Domain Name System
TLS Transport Layer Security
Man-in-the-middle attacks Man-in-the-middle attack

Related personas

Romanian Romanians
Motherboard Motherboard (website)
Romanian Romanian language
Court of Arbitration for Sport
Sockpuppet Sock puppet account

Advanced semantic analysis

Deeper signals for content research, entity SEO and topical coverage. The plain-language headings explain what each technical view is useful for.

Map overview Semantic statistics

Nodes183

Edges182

Triples413

Avg. degree1.99

Density0.010929

Components1

How this topic connects Entity context

See the strongest relationship patterns around the current topic before diving into the raw triples.

Fancy Bear

Top relations

related to Attacks on journalists · 44

Fancy Bear → According, Adrian Chen, American University, Armenia, Armenian, Associated Press, Baltics, Bellingcat, Brookings Institution, CNN, Daily Beast, Democrats, Editor-in-Chief, Ekaterina Vinokurova, Eliot Higgins, Ellen Barry, EVN Report, Fancy Bear's, From, Jamie Kirchick

related to Attacks · 34

Fancy Bear → Academi, An AP, Blackwater, Boeing, Caucasus, Committee, Eastern European, Fancy Bear's, Georgia, Kremlin, Lockheed Martin, March, Maria Alekhina, May, Mikhail Khodorkovsky, NATO, Only, Pussy Riot, Putin, Raytheon

related to The Ecumenical Patriarchate and other clergy (August 2018) · 27

Fancy Bear → According, Associated Press, August, Catholics, Church, Communities, Constantinople, Cyber, Eastern Orthodox Churches, Ecumenical Patriarch Bartholomew, Ecumenical Patriarchate, Jewish Organizations, Jews, Kyiv, Moscow Patriarchate, Muslims, Orthodox Christians, Orthodox Church, Russian Orthodox Church, The

related to World Anti-Doping Agency (August 2016) · 24

Fancy Bear → According, ADAMS, After, Analysts, Anti-doping Administration, Due, Elena Delle Donne, In August, International Olympic Committee, IOC, Management System, Medical, Olympic, Paralympics, Rio Olympics, Russia, Russian, Serena Williams, Simone Biles, The

related to root9B report (May 2015) · 22

Fancy Bear → According, Africa, America, Bank, Brian Krebs, Bundestag, Claudio Guarnieri, Claudio's, Command, Control, German Bundestag, In June, IP, June, May, Nigerian, Security, Sofacy, TD Bank, The

related to German and French elections (2016–2017) · 21

Fancy Bear → According, Angela Merkel, Angela Merkel's Christian Democratic, ANSSI, APT28, APT28's, Emmanuel Macron, French, Friedrich Ebert Foundation, German Konrad Adenauer Foundation, Macron, Marine Le Pen, Marine Le Pen's, Putin, Researchers, Russia, Russian, Social Democratic Party, The, Trend Micro

related to French television hack (April 2015) · 20

Fancy Bear → April, CyberCaliphate, French, Hackers, Iraq, ISIL, ISIS, Islamic State, Islamists, January, Levant, On April, President François Hollande, Service, The, TV5, TV5Monde, TV5Monde's Facebook, Twitter, Various

related to German attacks (from 2014) · 20

Fancy Bear → August, Authorities, Bundestag, Bundestag's IT, CDU, December, Dimitri Badin, German, Germany's, IT, Junge Union, Linken-faction, May, On, Parliament, Saarland, Sahra Wagenknecht, September, The, To

related to Dutch Safety Board and Bellingcat · 19

Fancy Bear → According, Bellingcat, Bit, DSB, Dutch Safety Board, Eliot Higgins, Gmail, Malaysia Airlines Flight, MH17, Russia, Russian, SFTP, The, They, ThreatConnect, TinyCC, Ukraine, URLs, VPN

related to Democratic National Committee (2016) · 18

Fancy Bear → An, April, CrowdStrike, Democratic, Democratic National Committee, Democratic Party, DNC, German, Gmail, Guccifer, Hillaryclinton, March, On June, On March, One, Podesta's Gmail, Russia, The

Important terminology Word statistics

Use these terms to understand the vocabulary surrounding the topic, not as a checklist for keyword stuffing.

Important terminology

fancy bear russian group attack attacks phishing security malware also report hackers used email 2015 2016 emails targeted government russia

Entity relationships Subject–Predicate–Object triples

Subject	Predicate	Object	Confidence	Src
Fancy Bear	Affiliations	Cozy Bear	1.00	infobox
Fancy Bear	Formation	c. 2004–2007[a]	1.00	infobox
Fancy Bear	Formerly called	APT28	1.00	infobox
Fancy Bear	Formerly called	Pawn Storm	1.00	infobox
Fancy Bear	Formerly called	Sofacy Group	1.00	infobox
Fancy Bear	Formerly called	Sednit	1.00	infobox
Fancy Bear	Formerly called	STRONTIUM	1.00	infobox
Fancy Bear	Formerly called	Tsar Team	1.00	infobox
Fancy Bear	Formerly called	Threat Group-4127	1.00	infobox
Fancy Bear	Formerly called	Grizzly Steppe (when combined with Cozy Bear)	1.00	infobox
Fancy Bear	Methods	Zero-days, spearphishing, malware	1.00	infobox
Fancy Bear	Official language	Russian	1.00	infobox
Fancy Bear	Parent organization	GRU	1.00	infobox
Fancy Bear	Purpose	Cyberespionage, cyberwarfare	1.00	infobox
Fancy Bear	Region served	Russia	1.00	infobox
Fancy Bear	Type	Advanced persistent threat	1.00	infobox
Fancy Bear	is a	Russian cyber espionage group	0.90	text
Fancy Bear	is a	state-run program and not a gang or a lone hacker.One of Fancy Bear's preferred targets is web-based email services	0.90	text

Related concept clusters Concept neighborhoods

These clusters group vocabulary that occurs around closely connected concepts in the source material.

Connections between topic areas Semantic bridges

Bridges can reveal useful research angles that are easy to miss in a flat list of related terms.

Min side: 3