New Russian cyber-spy crew Laundry Bear joins the email-stealing pack

A previously unknown Kremlin-linked group has conducted cyber-espionage operations against Dutch police, NATO member states, Western tech companies, and other organizations of interest to the Russian government since at least April 2024, according to Dutch intelligence services and Microsoft.

The Dutch services call the group Laundry Bear, while Microsoft dubbed it Void Blizzard. Both warn the crew appears to be backed by the Russian government.

"LAUNDRY BEAR has only carried out non-destructive cyber attacks to date, most likely for espionage purposes," according to a joint advisory from the Netherlands General Intelligence and Security Service (AIVD) and the Military Intelligence and Security Service (MIVD), which initially identified the group during an investigation into a credential-stealing attack against Dutch police in September 2024.

That same year, the Russian spies broke into defense, aerospace, and space technology companies that produce military equipment, plus firms that produce high-end technologies that Putin wants but can ...