Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

Global Accelerated Learning • Est. 1999
Glossary Term Fancy Bear APT28

Training Camp • Cybersecurity Glossary

What is Fancy Bear APT28?

Fancy Bear APT28 is a Russian GRU-linked cyber espionage group, also called Sofacy and Forest Blizzard, known for spear-phishing and zero-day attacks.

Glossary > Threats, Malware & Attacks > Fancy Bear APT28

Understanding Fancy Bear APT28

Fancy Bear, tracked as APT28 and also known as Sofacy, Sednit, and Forest Blizzard, is a state-sponsored cyber espionage group widely attributed to Russia's military intelligence agency, the GRU. Active since at least the mid-2000s, the group targets governments, militaries, defense contractors, and political organizations using spear-phishing, zero-day exploits, and custom malware. It is associated with high-profile operations including intrusions into political campaigns and defense networks.

Learn More About Fancy Bear APT28:

Ready to Get Certified?

Turn knowledge into credentials with our instructor-led cybersecurity boot camps.

View All Courses →