Laundry Bear
Laundry Bear is a Russia-attributed nation-state APT group with an ideological motive, tracked by Brandefense. It targets 8 sectors, including Government and Technology, in Ukraine. It uses 33 MITRE ATT&CK techniques and exploits 1 known CVE.
- Origin
- Russia
- Techniques
- 33
- Exploited CVEs
- 1
- First seen
- Apr 1, 2024
- Last seen
- Apr 1, 2025
- Record updated
Who They Target.
About Laundry Bear.
The actor targets organizations aligned with Russian intelligence priorities, including government, defense, transportation, media, non-governmental organizations, and healthcare entities in Europe, North America, NATO member states, and Ukraine. Microsoft reports that Void Blizzard primarily relies on credential theft, password spraying, and targeted spearphishing, including Evilginx-based adversary-in-the-middle phishing infrastructure.
Last updated Sep 30, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.