APT / THREAT GROUP
Sunglow Blizzard
🇷🇺Russia-attributed
1
campaigns
2
aliases
Last seen:Mar 17, 2026
Intelligence Profile
DEV-0665 is a threat actor associated with the HermeticWiper attacks. Their objective is to disrupt, degrade, and destroy specific resources within a targeted country.
Threat Analysis
Sunglow Blizzard is a known-sophistication threat actor attributed to Russia, engaged in cyber operations with a primary motivation of unknown activity patterns.
Known Campaigns
Sunglow Blizzard — Active Operations March 2026
Sunglow Blizzard is a unknown-motivation threat actor attributed to Russia. DEV-0665 is a threat actor associated with the HermeticWiper attacks. Their objective is to disrupt, degrade, and destroy specific resources within a targeted country....
ACTIVEMEDIUM2026
External References
Quick Facts
TypeAPT / Threat Group
Origin🇷🇺 Russia
Aliases2
SourceMalpedia
Also Known As
DEV-0665Sunglow Blizzard
Research Links
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.