[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fe2oW44BvGREJ5sZoJKsWaAJ3yBvK2H0tl8ryXwJGLBU":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":22,"country":23,"suspected_sponsor":24,"target_industries":25,"target_countries":26,"incident_types":27,"references":28,"techniques":42,"technique_count":43,"created_at":44,"seoMetadata":45,"schemaOrg":49},"SaintBear","saintbear",[9,10,11,12,13,14,15,16,17,18,19,20,21],"UNC2589","TA471","UAC-0056","Nascent Ursa","Nodaria","FROZENVISTA","Storm-0587","DEV-0587","Saint Bear","Lorec53","EMBER BEAR","Lorec Bear","Bleeding Bear","A group targeting UA state organizations using the GraphSteel and GrimPlant malware.","RU",null,[],[],[],[29,30,31,32,33,34,35,36,37,38,39,40,41],"https:\u002F\u002Fmalpedia.caad.fkie.fraunhofer.de\u002Fdetails\u002Fwin.graphsteel","https:\u002F\u002Fcert.gov.ua\u002Farticle\u002F38374","https:\u002F\u002Fblog.malwarebytes.com\u002Fthreat-intelligence\u002F2022\u002F04\u002Fnew-uac-0056-activity-theres-a-go-elephant-in-the-room\u002F","https:\u002F\u002Fwww.intezer.com\u002Fblog\u002Fresearch\u002Felephant-malware-targeting-ukrainian-orgs\u002F","https:\u002F\u002Fwww.sentinelone.com\u002Fblog\u002Fthreat-actor-uac-0056-targeting-ukraine-with-fake-translation-software\u002F","https:\u002F\u002Funit42.paloaltonetworks.com\u002Fatoms\u002Fnascentursa\u002F","https:\u002F\u002Fsymantec-enterprise-blogs.security.com\u002Fblogs\u002Fthreat-intelligence\u002Fnodaria-ukraine-infostealer","https:\u002F\u002Fblog.google\u002Fthreat-analysis-group\u002Ffog-of-war-how-the-ukraine-conflict-transformed-the-cyber-threat-landscape\u002F","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fblog\u002F2023\u002F06\u002F14\u002Fcadet-blizzard-emerges-as-a-novel-and-distinct-russian-threat-actor\u002F","https:\u002F\u002Fcircleid.com\u002Fposts\u002F20230412-probing-lorec53-phishing-through-the-dns-microscope","https:\u002F\u002Fnsfocusglobal.com\u002Fwp-content\u002Fuploads\u002F2021\u002F11\u002FAnalysis-Report-on-Lorec53-Group.pdf","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fblog\u002Fwho-is-ember-bear\u002F","https:\u002F\u002Fattack.mitre.org\u002Fgroups\u002FG1003\u002F",[],0,"2023-08-09T17:25:09.409843+00:00",{"title":46,"metaDescription":47,"keywords":48},"SaintBear Threat Actor Profile | EdgeProtect","A group targeting UA state organizations using the GraphSteel and GrimPlant malware....","SaintBear, UNC2589, TA471, UAC-0056, Nascent Ursa, Nodaria, FROZENVISTA, Storm-0587, DEV-0587, Saint Bear, Lorec53, EMBER BEAR, Lorec Bear, Bleeding Bear, threat actor, APT, cyber threat, threat intelligence, RU",{"@context":50,"@type":51,"name":6,"alternateName":52,"description":22,"url":53,"mainEntityOfPage":54,"location":56},"https:\u002F\u002Fschema.org","Organization",[9,10,11,12,13,14,15,16,17,18,19,20,21],"https:\u002F\u002Fdev.precursorintelligence.com\u002Fthreat-actors\u002Fsaintbear",{"@type":55,"@id":53},"WebPage",{"@type":57,"name":23},"Country"]