Winter Vivern | Uncovering a Wave of Global Espionage

Executive Summary

• SentinelLabs has conducted an investigation into Winter Vivern Advanced Persistent Threat (APT) activity, leveraging observations made by The Polish CBZC and Ukraine CERT. Our research has uncovered a previously unknown set of espionage campaigns and targeting activities conducted by this threat actor.


• Our analysis indicates that Winter Vivern’s activities are closely aligned with global objectives that support the interests of Belarus and Russia’s governments. The APT has targeted a variety of government organizations, and in a rare instance, …

actor advanced advanced persistent threat analysis apt belarus campaigns cert espionage executive global investigation malware analysis objectives persistent persistent threat polish research russia sentinellabs support targeting threat threat actor ukraine winter winter vivern