Uptime Hamster: 113d 11h 46mDeploy: 23 Oct 2026 07:21Updated: 2026-07-21
Logo del actor de amenaza Roaming Tiger

Roaming Tiger

0 incidentes 0 paises 0 sectores apt CN Ultimo: -
Aliases: BRONZE WOODLAND, Rotten Tomato, TOPNEWS, SOGU, GHOST, TEMPFUN, FIRSTBLOOD, PI, este grupo se ha asociado con múltiples sectores críticos, incluyendo defensa, energía, aeroespacial, petrolero
Ver en IntelTracker → APTTrail →
Roaming Tiger, also known as APT28 or Fancy Bear, is a highly active and persistent cyber espionage group assessed with high confidence to be affiliated with the Russian military intelligence agency, GRU, specifically Unit 26165. This group has been operating since at least 2004, aligning its campaigns with Russian state interests to conduct intelligence collection, influence political outcomes, and undermine adversaries globally. Roaming Tiger is distinguished by its consistent focus on high-value geopolitical targets, such as governments, military organizations, and critical infrastructure, and its history of leveraging zero-day vulnerabilities and sophisticated spear-phishing campaigns to achieve its objectives. Their operations are typically intelligence-driven, emphasizing data exfiltration rather than financially motivated attacks, and have included high-profile incidents like the 2016 hack of the Democratic National Committee. The group's activities often coincide with major geo

Aliases del actor

BRONZE WOODLANDRotten TomatoTOPNEWSSOGUGHOSTTEMPFUNFIRSTBLOODPIeste grupo se ha asociado con múltiples sectores críticosincluyendo defensaenergíaaeroespacialpetrolero

Actores similares

roaming-tigeractor · 1pitty-tigeractor · 1RAZOR TIGERapt · 0VICEROY TIGERapt · 0HAZY TIGERapt · 0Mirage Tigerapt · 0contiransomware · 351ContFRthreat-actor · 2holyghostthreat-actor · 2energetic-bearactor · 1
Motivacion
Information theft and espionage
Tecnicas MITRE
T1074.001, T1583.006, T1078, T1056, T1595, T1059.003
CVEs relacionadas
CVE-2026-24858, CVE-2026-24423, CVE-2026-24061, CVE-2026-23800, CVE-2026-23760, CVE-2026-23550
Tipo
apt
Pais origen
CN
Motivacion
Information theft and espionage
Impacto
47
Actualizado
Wed, 01 Ju

Paises objetivo (OSINT)

BelarusKyrgyzstanKazakhstanTajikistanUkraineUzbekistan

Sectores objetivo (OSINT)

HospitalsAir TransportationOil & GasSpace & DefenseScientific Research and Development ServicesSpectator SportsGrantmaking and Giving ServicesCivic and Social OrganizationsBusiness, Professional, Labor, Political, and Similar OrganizationsPeriodical Publishers