Russia’s modern wars are fought not only with tanks and missiles, but also with code and compromised networks. Since the early 2000s, the Russian state has deployed a constellation of cyberespionage units under the umbrella of her intelligence services, each tailored to a specific strategic purpose. Amongst the most active and sophisticated of these are four so-called advanced persistent threat (APT) groups: Venomous Bear and Energetic Bear, both associated with the Federal Security Service (FSB