Assembling the Russian Stacking Doll: UNC2452 Merged into APT29
Title: Assembling the Russian Stacking Doll: UNC2452 Merged into APT29
Presenters: Parnian Najafi, Threat Intelligence Lead, Mandiant
Date: April 28, 2022
Mandiant gathered sufficient evidence to assess that UNC2452, the group responsible for the 2020 SolarWinds supply chain compromise, is attributable to APT29, a Russia-based espionage actor assessed to be sponsored by the Russian Foreign Intelligence Service (SVR). This webinar provides awareness and additional insights on the evolution of APT29's operational and behavioral tactics, techniques, and procedures (TTPs).