{"actor":{"id":"gamaredon-group","name":"Gamaredon Group","aliases":["Gamaredon Group","BlueAlpha","ACTINIUM","UAC-0010","WINTERFLOUNDER","Shuckworm","Trident Ursa","DEV-0157","Armageddon"],"vendor_names":{"crowdstrike":"PRIMITIVE BEAR","eset":"Gamaredon","mandiant":"UNC530","microsoft":"Aqua Blizzard","mitre":"G0047","secureworks":"IRON TILDEN"},"mitre_gid":"G0047","type":"nation-state","type_verbatim":"nation-state APT","secondary_types":[],"origin":"RU","origins":["RU"],"targets":["LT","LV","MD","PL","UA"],"target_regions":[],"sectors":["def","edu","gov","leg"],"threat_types":["esp"],"mitre_techniques":["T1001","T1005","T1012","T1020","T1021.005","T1025","T1027","T1027.004","T1027.010","T1027.015","T1033","T1036.005","T1039","T1041","T1047","T1053.005","T1055","T1057","T1059.001","T1059.003","T1059.005","T1070.004","T1071.001","T1080","T1083","T1090","T1090.003","T1091","T1095","T1102","T1102.002","T1102.003","T1105","T1106","T1112","T1113","T1119","T1120","T1137","T1140","T1204.001","T1218.005","T1218.011","T1221","T1480","T1534","T1547.001","T1561.001","T1564.003","T1566.001","T1568","T1571","T1583.003","T1583.006","T1620","T1685"],"gir_codes":[],"active_since":2013,"brief":"FSB-attributed cyber group operating against Ukraine since 2013.","attribution_sponsor":null,"attribution_confidence":null,"merged_into":null,"split_from":[],"created_at":"2026-05-20T09:52:22.054715+00:00","updated_at":"2026-07-29T08:14:20.52+00:00","url":"https://aptatlas.net/actors/gamaredon-group"},"exports":{"stix":"https://aptatlas.net/api/v1/actors/gamaredon-group/stix","navigator":"https://aptatlas.net/api/v1/actors/gamaredon-group/navigator"}}