Ice Relic, also known as APT29, Cozy Bear, and Midnight Blizzard, is a Russian state-sponsored threat group. Sub-clusters UNC6293 and UNC7005 are linked to initial access operations. Known for sophisticated phishing, OAuth abuse, and targeting government, diplomatic, and think tank entities.