Threat Actor
Berserk Bear
- First Reported
- Mar 25, 2026
- Latest Reported
- Jul 14, 2026
Reported Context (5)
- The advisory names Berserk Bear among Russian FSB Center 16 threat actors seen engaging in the reported attacks. US and Allies Warn Russian APTs Are Targeting Critical Infrastructure Routers
- Listed as an industry tracking name related to the activity; the advisory cautions that industry naming does not necessarily map one-to-one to the authoring agencies' understanding. Joint Advisory Urges Router Hardening Against Russian FSB Center 16 Activity
- The article identifies Berserk Bear as another tracking name for the hackers linked to FSB Center 16 and attributes the reported network-device attacks to that group. US and 12 Allies Warn of Russian FSB-Linked Attacks on Network Devices
- The article identifies Berserk Bear as a tracking name for FSB Center 16, which the advisory attributes to router-targeting activity. Allied Agencies Warn Russian FSB Hackers Are Targeting Critical Infrastructure Routers
- The article identifies Berserk Bear as an alias of Dragonfly, which CERT-PL attributed to the reported campaign targeting the Polish power grid and ICS/OT devices. Team Cymru Reports Thousands of Internet-Exposed ICS Devices
CVE (4)
Malware (1)
People (1)
Threat Actors (11)
MITRE ATT&CK (22)
Vendors (11)
Products (8)
Tools (2)
Industries (15)
Countries (16)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.
