Category:APT

Fireeye Says:

 * APT1
 * See also: wiki:Mandiant (2006-2013); wiki:China


 * APT28
 * See also, wiki: Fancy Bear.


 * APT29
 * See also, wiki: Cozy Bear.

Three Bears

 * Here, in Russ. Goldilocks and the Three Bears (Engl), almost identical to the Russian.

US sanctions, 'Obama says'

 * Issuance of Amended Executive Order 13694; Cyber-Related Sanctions Designations -US Treasury, December 29, 2016
 * FACT SHEET: Actions in Response to Russian Malicious Cyber Activity and Harassment -The White House, Office of the Press Secretary, December 29, 2016

Media

 * Two Russian Compounds, Caught Up in History’s Echoes -The New York Times, December 29, 2016
 * The luxurious, 45-acre compound in Maryland being shut down for alleged Russian espionage - Washington Post, December 29, 2016
 * White House announces retaliation against Russia: Sanctions, ejecting diplomats -CNN, December 30, 2016
 * ''Russia's first visible action came later Thursday, when Russian authorities ordered the closure of the Anglo-American School of Moscow (??-not confirmed), a US official briefed on the matter said. The order from the Russian government closes the school, which serves children of US, British and Canadian embassy personnel, to US and foreign nationals. The order also closes access to the US embassy vacation house in Serebryany Bor, near Moscow.
 * Russian Embassy in UK responds to sanctions with 'lame duck tweet' -The Independent, December 29, 2016

FBI says
GRIZZLY STEPPE – Russian Malicious Cyber Activity, National Cybersecurity and Communications Integration Center, FBI, Dec. 29 (spotted on Dec 30), 2016.

Commentary
No idea. (Rs).

Wordfence

 * US Govt Data Shows Russia Used Outdated Ukrainian PHP Malware - Mark Maunder, Wordfence, December 30, 2016
 * See also: DNC Leak

Public hearings

 * Foreign Cyber Threats to the United States - US Senate Committee hearing, January 5, 2017