NoisyBear

A suspected Russia-linked espionage cluster associated with Operation BarrelFire against Kazakhstan's oil and gas sector. It has used tailored spearphishing and custom malware to collect information from organizations with both enterprise IT and industrial relevance; public attribution remains tentative.