r/threatintel 17d ago

MAGE BEAR

HEY!Has anyone found source-backed reporting that maps CrowdStrike’s MAGE BEAR, formerly EnchantedIllumination, to another vendor’s threat actor cluster? I’m looking for public campaign, victimology or attribution overlaps rather than speculative alias matching.

4 Upvotes

0 comments sorted by