Overview
- Laundry Bear was confirmed as the group behind last year’s cyberattacks on Dutch police networks, NATO and several European institutions.
- Dutch General Intelligence Agency and MIVD concluded the hackers operate with Kremlin support to steal sensitive data from EU and NATO member states.
- A September 2024 breach exploited a pass-the-cookie technique to access the Dutch police Global Address List and harvest officers’ contact details.
- Investigators found the group chiefly targeted information on Western military procurement and arms shipments to Ukraine.
- Alongside attribution, the agencies issued a technical advisory detailing Laundry Bear’s methods to help governments and companies strengthen cyber defenses.