Dmitriy Sergeyevich Badin
Attribution profile
- Type
- Nation State
- Location
- Russia
- Known incidents
- 1 incident
- Sources
- 0 sources
- First seen
- 2014-11-20
- Last seen
- 2014-11-20
- Updated
- 2026-10-18 08:38
- Aliases
- 1 alias
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
Dmitriy Sergeyevich Badin, an alias linked to Russian GRU officers, has been attributed to a cyber espionage campaign that targeted international anti‑doping organizations and FIFA in 2014. The operation sought to steal confidential medical records, athlete therapeutic use exemptions and anti‑doping strategies, and to weaponize the stolen data through modified leaks and false hacktivist personas (“Fancy Bears' Hack Team”) to discredit investigations into Russia’s state‑sponsored doping program. Initial access was achieved via spearphishing and close‑access Wi‑Fi compromises during global events, with the attackers amplifying fabricated narratives by direct outreach to journalists. The activity reflects a state‑nexied GRU effort focused on espionage and influence operations against sports‑governance bodies and anti‑doping institutions worldwide.
Incidents
Attributed incidents are available to members.
1 incidentSources
Sources available to members: 0 sources.