ENERGETIC BEAR
No sourced public emblem in this profile.
reference profile · reported nexus: RU (not nationality)
A Russian group that collects intelligence on the energy industry.
Source-reported aliases: BERSERK BEAR, ALLANITE, CASTLE, DYMALLOY, TG-4192, Dragonfly, Crouching Yeti, Group 24, Havex, Koala Team, IRON LIBERTY, G0035, ATK6, ITG15, BROMINE, Blue Kraken, Ghost Blizzard. Associations do not prove equivalence.
Target geography
Catalog-listed countries (associations, not attack counts): 
United States of America · 
Germany · 
Türkiye · 
China · 
Spain · 
France · 
Ireland · 
Japan · 
Italy · 
Poland
No bound claim-post feed for this label.
Historical casebook
No dated record curated yet; absence does not establish inactivity.
Planned Kinwilder coverage
Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.
No assigned review window.
References
https://threatpost.com/energy-watering-hole-attack-used-lightsout-exploit-kit/104772/
https://www.cfr.org/interactive/cyber-operations/crouching-yeti
https://www.reuters.com/article/us-ukraine-cyber-attack-energy-idUSKBN1521BA
https://dragos.com/wp-content/uploads/CrashOverride-01.pdf
https://www.riskiq.com/blog/labs/energetic-bear/
https://symantec-blogs.broadcom.com/blogs/threat-intelligence/dragonfly-energy-sector-cyber-attacks
https://www.kaspersky.com/resource-center/threats/crouching-yeti-energetic-bear-malware-threat
https://attack.mitre.org/groups/G0035/
https://www.secureworks.com/research/resurgent-iron-liberty-targeting-energy-sector
https://dragos.com/adversaries.html
https://dragos.com/media/2017-Review-Industrial-Control-System-Threats.pdf