SafeBreach Coverage for AA24-249A (GRU Unit 29155)
ID: 195ace66-4ea2-533d-a1e2-9930eab247bc
STIX ID: report--195ace66-4ea2-533d-a1e2-9930eab247bc
Feed Name: Security Boulevard
Threat Score
This SafeBreach report summarizes the US-CERT advisory AA24-249A on Russia’s GRU Unit 29155 (aka Cadet Blizzard/Ember Bear), outlining its history of espionage, sabotage, and destructive operations (including WhisperGate), the reconnaissance and exploitation tools and techniques it uses (scanning, AD enumeration, RCE against IP cameras, Meterpreter C2, Rclone exfiltration), and SafeBreach playbook and scenario coverage for validating defenses against these TTPs and IOCs.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
