Boulder Bear
First observed activity in December 2013.
origin (suspected)
Russiaattribution confidence: medium (50)
source: misp-galaxy
Boulder Bear· Russia
Boulder Bear is a threat actor active since 2013 and linked to Russia.
Analyst brief
Boulder Bear is a threat actor with first observed activity in December 2013, linked to Russia but with its precise type currently unknown. There is no specific information provided regarding its target sectors or victim profiles. Since the primary TTPs and tools are not described in the given data, defenders should focus on general anomaly detection and network monitoring for unknown threats.
unknown
FAQ2
When was the threat actor Boulder Bear first observed active?
Boulder Bear's first activity was observed in December 2013.
What is the assessment regarding the origin of Boulder Bear?
The precise origin of Boulder Bear is unknown, but it is linked to Russia.
See also6
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.