CrowdStrike Animal Names
Vendor codenames using animals by country
CrowdStrike names groups with an animal tied to the suspected sponsor: BEAR = Russia, PANDA = China, KITTEN = Iran, CHOLLIMA = North Korea, SPIDER = criminal, JACKAL = hacktivist. So 'Fancy Bear' signals a Russian group.