Loading threat actor…
Cyber Resistance is a pro-Ukraine hacktivist actor associated in reporting with the Ukrainian Cyber Alliance. The group has been linked to operations targeting Russian interests, including leaks of purported Russian government correspondence and campaigns aimed at collecting sensitive information from Russian military-linked targets. Reported activity includes targeting spouses of Russian military personnel to obtain personal and sensitive data. Cyber Resistance has also been referenced in connection with past operations resembling mobile spyware campaigns directed at Russian military Android users, although attribution in those cases has not been confirmed. The actor’s publicly reported behavior is consistent with hacktivist and intelligence-supporting operations focused on data acquisition and disclosure rather than ransomware. Observed and reported tradecraft associated with operations linked to the group includes social engineering through themed channels and lures, use of trojanized mobile applications, collection of contacts and account data, geolocation tracking, file listing and document theft, and remote tasking through modular malware capabilities. The group’s targeting aligns with the Russia-Ukraine conflict and broader pro-Ukraine information and cyber operations.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
Attributed origin per open-source reporting.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Referenced as a Ukrainian hacktivist grouping previously linked to operations targeting Russian military personnel and their spouses to extract sensitive/personal data; mentioned only as a historical parallel with no confirmed attribution to the Alpine Quest spyware campaign.
Cyber Resistance is a pro-Ukraine hacktivist group leaking Russian government e-mails related to sensitive topics such as nuclear threats and Arctic posturing.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.