Finnish security agencies warn of Russian cyber espionage targeting email systems

Finland’s Security Intelligence Service (Supo) and military intelligence have issued a joint warning with Western partners about the Russian cyber threat actor Laundry Bear, which is attempting to breach organizational email systems.

Targets include public administration, critical infrastructure, defense industry, technology firms, and the non-profit sector—particularly in NATO countries and Ukraine. Finland has also been affected.

According to Supo and military intelligence, Laundry Bear employs social engineering tactics, such as impersonating known individuals and using stolen credentials.

The increase in Russian cyber espionage follows reduced opportunities for traditional human intelligence in the West due to expulsions and sanctions.