CISA Details Cloud-Focused Attack Techniques Used by APT29

The United States government and several of its allies are warning organizations about new and evolving tactics being used by APT29, one of the more mature and active threat groups, to target cloud services and gain access to sensitive data.

APT29, also known widely as Cozy Bear, is a group associated with the Russian SVR intelligence service and is responsible for the SolarWinds supply chain attack in 2020, among other high-profile intrusions. The group is well-resourced and mature …

access allies apt29 attack attack techniques bear cisa cloud cloud services cozy bear data government organizations sensitive sensitive data services states tactics target techniques threat threat groups united united states warning