Cyber Threat Actor: Artem Andreyevich Malyshev

ArtemAndreyevich Malyshev is an alias associated with a threat actor linked to the Russian Main Intelligence Directorate (GRU). The actor is known to operate from Russia, as indicated in public attributions. This individual is identified as one of the GRU officers involved in a cyber espionage campaign disclosed in 2014. The connection to the GRU establishes a clear state nexus for the actor's activities. The actor was among the GRU officers publicly charged by the United States Department of Justice for their role in the hacking and influence operation.

The actor's targeting has been observed against international anti-doping organizations and sports governing bodies such as FIFA. The primary objective of these operations was to acquire confidential medical records, athlete therapeutic use exemptions, and anti-doping strategies. Beyond espionage, the stolen information was used to support influence operations aimed at discrediting investigations into Russia's state‑sponsored doping program. These influence efforts included the creation of false narratives about athlete drug use.

Initial access was gained through spearphishing messages directed at personnel of the target organizations. The actor also employed close‑access Wi‑Fi compromises during major global events to infiltrate networks. To conceal involvement, the operator adopted the false hacktivist persona known as 'Fancy Bears' Hack Team' when releasing stolen data. Additionally, the actor engaged in direct outreach to journalists to amplify the fabricated narratives derived from the leaked information. The close‑access Wi‑Fi compromises required physical proximity to venues hosting international sporting events.

The campaign described in the 2014‑11‑20 indictment represents a representative example of the actor's modus operandi, combining espionage with disinformation. It illustrates how the GRU‑linked actor leveraged cyber techniques to gather intelligence and then weaponized that intelligence in a coordinated influence effort. The operation is cited as part of broader GRU activities targeting entities of strategic interest to the Russian government. No other specific campaigns are detailed in the available source material.