APT Explorer

All actors

Void Blizzard

Also reported as Laundry Bear, LAUNDRY BEAR, UAC-0190 and TA488. Linked to Russia by four sources.

Reports
15
Last reported
Known CVEs
11
Origin
Russia
ID
void-blizzard
Sources
MISPETDAMalpediaMicrosoft
Merge evidence
8 alias matches

Reports per quarter

Dated reports, 2016 Q2 to 2026 Q3.

Techniques seen in the last two years

Show all 25 techniques Show fewer

Counts come from technique IDs in the actor's report text.

CVEs named in reports

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. Cleaning Out Inboxes: TA488 Comes for Outlook with Another Half-Click Exploit

    Malpedia library date ORKL

    Archived copy on ORKL Details

  2. ta458 roundpress exploits

    Malpedia library date ORKL

    Archived copy on ORKL Details

  3. NSA and Partners Alert Zimbra Collaboration Suite Users of a Russian State-Supported Phish

    Malpedia library date ORKL

    Archived copy on ORKL Details

  4. TA488 Targets Zimbra Mailservers with Half-Click Exploits

    Malpedia library date ORKL

    Archived copy on ORKL Details

  5. Threat actors | Latest Threats | Microsoft Security Blog

    date ORKL added it ORKL

    Archived copy on ORKL Details

  6. Microsoft Defender for Cloud Apps Archives | Microsoft Security Blog

    date ORKL added it ORKL

    Archived copy on ORKL Details

  7. Threat actors | Latest Threats | Microsoft Security Blog

    date ORKL added it ORKL

    Archived copy on ORKL Details

  8. UAC-0255 Attack Detection: Threat Actors Impersonate CERT-UA to Infect Ukrainian Public and Private Sector Organizations With AGEWHEEZE RAT

    Malpedia library date ORKL

    Archived copy on ORKL Details

  9. Operation GhostMail: Russian APT exploits Zimbra Webmail to Target Ukraine State Agency

    Malpedia library date ORKL

    Archived copy on ORKL Details

  10. CERT-UA

    Malpedia library date ORKL

    Archived copy on ORKL Details

Show all 15 reports Show fewer

  1. Onbekende Russische groep achter hacks Nederlandse doelen | AIVD

    Malpedia library date ORKL

    Archived copy on ORKL Details

  2. New Russia-affiliated actor Void Blizzard targets critical sectors for espionage | Microsoft Security Blog

    Malpedia library date ORKL

    Archived copy on ORKL Details

  3. Microsoft Defender for Cloud Apps Archives | Microsoft Security Blog

    Malpedia library date ORKL

    Archived copy on ORKL Details

  4. Microsoft Defender for Cloud Archives | Microsoft Security Blog

    Malpedia library date ORKL

    Archived copy on ORKL Details

  5. Threat actors | Latest Threats | Microsoft Security Blog

    Malpedia library date ORKL

    Archived copy on ORKL Details

Newest first. Details opens the report in Explore.