Sunglow Blizzard
DEV-0665
DEV-0665 is a threat actor associated with the HermeticWiper attacks. Their objective is to disrupt, degrade, and destroy specific resources within a targeted country.
origin (suspected)
Russia
source: misp-galaxy2 refs →
Sunglow Blizzard· Russia
unknown
FAQ2
What is the Sunglow Blizzard (DEV-0665) actor known for?
Sunglow Blizzard (DEV-0665) is a threat actor associated with the HermeticWiper attacks, known for destructive wiper operations.
What should defenders watch for regarding Sunglow Blizzard?
Defenders should stay alert for signs of wiper activity and unauthorized disk encryption or modification operations against critical systems.
See also6
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.