Dutch intelligence exposed a previously unknown Russian hacking group 'Laundry Bear' responsible for cyber espionage attacks on Dutch organizations including the national police in 2024.

Dutch intelligence agencies AIVD and MIVD unmasked 'Laundry Bear,' a likely Russian state-sponsored hacking group conducting high-speed, automated, non-destructive espionage attacks targeting NATO countries' defense ministries, military units, aerospace and technology firms, and civilian entities focused on IT and technology sectors. The group exploited cloud email environments using simple, stealthy techniques avoiding malware, impersonated organizers in phishing campaigns, and targeted information relevant to Russian interests in Ukraine. Microsoft tracks the group as 'Void Blizzard,' noting its global activity since 2024 with a focus on NATO members and Ukraine. The hacking group was uncovered following a September 2024 session hijacking attack on a Dutch police employee account leading to theft of police contact details. The advisory warns that Laundry Bear's operations demonstrate knowledge about military equipment production and Western sanctions evasion. Dutch services emphasize incomplete insight into the group's activities and seek broader defensive measures.