Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

Global Accelerated Learning • Est. 1999
Glossary Term Cozy Bear APT29

Training Camp • Cybersecurity Glossary

What is Cozy Bear APT29?

Cozy Bear APT29 is a Russian SVR-linked espionage group behind the SolarWinds supply-chain attack, also tracked as Midnight Blizzard and Nobelium.

Glossary > Threats, Malware & Attacks > Cozy Bear APT29

Understanding Cozy Bear APT29

Cozy Bear, tracked as APT29 and also known as The Dukes, Nobelium, and Midnight Blizzard, is a Russian state-sponsored threat group widely attributed to the SVR foreign intelligence service. The group is known for stealthy, long-term espionage campaigns, including the 2020 SolarWinds supply-chain compromise and intrusions targeting government, diplomatic, and technology organizations. APT29 favors sophisticated tradecraft, custom malware, and abuse of cloud and identity infrastructure.

Learn More About Cozy Bear APT29:

Ready to Get Certified?

Turn knowledge into credentials with our instructor-led cybersecurity boot camps.

View All Courses →