BlueDelta

Recorded Future's name for a Russian state-sponsored actor overlapping with APT28, Fancy Bear, and GRU Unit 26165. It conducts credential harvesting and malware operations against Ukraine, NATO governments, energy, defense, and other strategic targets.