FrostyNeighbor

Origin
BY
Primary motivation
espionage
Sophistication
advanced
Resource level
government
Actor type
nation-state
Profile updated
2026-07-07 12:18:59

Targeted industries: government-and-public-sector media-and-entertainment

Targeted regions: country_code:ua country_code:pl country_code:lt

Context

FrostyNeighbor is a Belarus-aligned APT group known for conducting influence and disinformation campaigns, particularly targeting Ukraine, Poland, and Lithuania. They have compromised various governmental and private sector entities, including the Polish Anti-Doping Agency, through hack-and-leak operations. The group is believed to collaborate with initial access brokers to exploit high-value targets, utilizing techniques such as zero-day vulnerabilities. Their operations are linked to cyber-enabled disinformation campaigns critical of the North Atlantic Alliance.

Reports & references

  • web-assets.esetstatic.com — Eset Apt Activity Report Q2 2024 Q3 2024 (report)

External references