Cybersecurity incident
Date: 2018-01-25 00:00:00
Affected organization: SVR (COZYBEAR)
Affected country: Russian Federation
Industry: Public Administration
Event type: Exploitive
Event subtype: Exploitation of Application Server,Exploitation of End Hosts,Exploitation of Sensors
Motive: Political-Espionage
Actor: Dutch AIVD
Actor type: Nation-State
Actor country: Netherlands
Description: A threat actor successfully compromised the networks of the Dukes (Cozy Bear), gaining visibility into the Dukes' targeting methods and operations. This compromise allegedly helped the U.S. intelligence community to attribute the 2016 compromise of the Democratic National Committee and other entities to Russian state-sponsored actors.