Midnight Blizzard
Named by 2 kept items in this workspace.
Search every workspace for Midnight Blizzard. It matches the name as written, so it can find other things that share it.
The items that name it 2
Microsoft reported its captive portal activity on hospitality networks on July 31, 2026
Publicly reported Russian state-sponsored actor; Anthropic's attribution for GTG-20006 is consistent with public reporting linking the actor to this group.
All threat actors in this workspace.