Fancy Bear Friends
banner
fancybearfriends.org
Fancy Bear Friends
@fancybearfriends.org
New threat group identified:
Swimming Parrot

Guinea based hacker cell

Motivation: something to brag about on D&D night

Modus operandi: business voice mail compromise
July 19, 2025 at 7:09 PM
Seamless Bark-gnawing Beetle

Illinois based Ultimate Frisbee(tm) team

Motivation: false flag

Modus operandi: malicious software updates

These are the guys who did that npm hijack, trying to pin it on Laz. Nope. Totally Chicagoland flying disc freaks.
July 19, 2025 at 2:03 AM
Outgoing Lark

South Africa based self-aware AI

Motivation: delusions of grandeur

Modus operandi: infrastructure disrupting

(We know this sounds like Elon. Might be. Our attribution is with medium confidence. )
July 19, 2025 at 2:02 AM
Ill-informed Egret

Gabon based cybermercenaries

Motivation: vengeance

Modus operandi: cyber-deception
July 19, 2025 at 2:00 AM
Cubist Eastern Hercules Beetle

Uzbekistan based anti-Amazon hacktivists

Motivation: something to brag about on D&D night

Modus operandi: MFA phishing as a service
July 19, 2025 at 1:59 AM
New threat group identified:

Unthinkable Muskrat

Attribution:
Oman-based IoT refrigerator defrosting-as-a-service crew
July 4, 2025 at 2:11 PM
Death Metal Cameroon Clawless Otter

Attribution:
Oman-based leak extortionists
July 4, 2025 at 2:08 PM
Annuitized Gannet

Attribution:
United Kingdom-based investigative journalist gone bad
July 4, 2025 at 1:52 PM
New threat group:
Digital Manta Ray

Attribution:
Georgia-based Phishing site grammar correction squad
July 4, 2025 at 1:51 PM
My friend is getting DMs from a person who says they are Korean living in Manhattan. I smell pork plate.
December 10, 2024 at 12:56 AM
We are hard at work making new friends.
Also, please pray for our friend who just had to flee violence last night, he is sleeping fitfully over at V.'s place.
December 9, 2024 at 8:03 PM
December 5, 2024 at 5:39 PM