Skip to content
brandefense.io
Request A Demo
UnclassifiedUnknown

FlyingYeti

FlyingYeti is a Russia-attributed threat actor group, tracked by Brandefense.

Also known as
  • Storm-1837
Request IOC feedRequest ATT&CK export
Origin
Russia
Techniques
0
Exploited CVEs
No CVE data
Record updated

About FlyingYeti.

FlyingYeti is a Russia-aligned threat actor targeting Ukrainian military entities. They conduct reconnaissance activities and launch phishing campaigns using malware like COOKBOX. FlyingYeti exploits the WinRAR vulnerability CVE- to infect targets with malicious payloads. Cloudforce One has successfully disrupted their operations and provided recommendations for defense against their phishing campaigns.

Last updated Oct 9, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.