logo

SafeBreach Coverage for AA24-249A (GRU Unit 29155)

ID: 195ace66-4ea2-533d-a1e2-9930eab247bc

STIX ID: report--195ace66-4ea2-533d-a1e2-9930eab247bc

Feed Name: Security Boulevard

Threat Score
90/100

Date Published: 2024-09-06

Date Updated: 2026-04-22

Author: Kaustubh Jagtap

...
...

This SafeBreach report summarizes the US-CERT advisory AA24-249A on Russia’s GRU Unit 29155 (aka Cadet Blizzard/Ember Bear), outlining its history of espionage, sabotage, and destructive operations (including WhisperGate), the reconnaissance and exploitation tools and techniques it uses (scanning, AD enumeration, RCE against IP cameras, Meterpreter C2, Rclone exfiltration), and SafeBreach playbook and scenario coverage for validating defenses against these TTPs and IOCs.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.