# SVR The Foreign Intelligence Service (SVR — Sluzhba Vneshney Razvedki) is Russia's primary foreign intelligence agency, responsible for espionage, long-term agent recruitment, and intelligence collection outside Russian borders. It is the direct successor to the [[KGB]]'s First Chief Directorate — the foreign operations arm that ran Soviet espionage from the Cambridge Five through the Cold War's end — and the Russian equivalent of the [[CIA]] and [[MI6]]. The SVR is the quietest of Russia's three intelligence services, operating in contrast to the [[GRU]]'s aggressive and often reckless style and the [[FSB]]'s brutal domestic enforcement. Where the GRU hacked the DNC and poisoned the Skripals, the SVR prefers patient infiltration: cultivating sources over years, placing deep-cover "illegals" in target countries under assumed identities, and maintaining persistent access to sensitive networks. ## The SolarWinds operation The SVR's cyber unit — known to the cybersecurity community as Cozy Bear or APT29 — executed the SolarWinds compromise discovered in December 2020, one of the most sophisticated supply-chain attacks in history. SVR operators inserted malicious code into a routine software update for SolarWinds' Orion network management product, which was then distributed to approximately 18,000 organizations including the US Departments of Treasury, Commerce, Homeland Security, State, and the National Nuclear Security Administration. The operation ran undetected for at least nine months — a timeline that reflects the SVR's institutional preference for collection over disruption. Unlike the [[GRU]]'s NotPetya attack (designed to destroy) or its election hacking (designed to influence), SolarWinds was a classic intelligence operation: get in, stay hidden, collect everything. The [[NSA]] and [[CISA]] attributed the operation to the SVR, not the GRU. ## KB relevance The SVR completes the Russian intelligence triad tracked across the vault. While the [[FSB]] is [[Vladimir Putin]]'s domestic power base and the [[GRU]] is the blunt instrument of [[Russian Election Interference]], the SVR represents the patient, professional espionage capability that targets the deepest secrets of Western governments. Its SolarWinds operation — penetrating US government networks through a trusted software vendor — is a case study in the supply-chain vulnerability that parallels the [[Chip Export Controls]] and AI security debates the vault tracks. ## See Also - [[FSB]] — Russia's domestic security service - [[GRU]] — Russia's military intelligence service - [[KGB]] — the Soviet predecessor - [[CIA]] — US foreign intelligence equivalent - [[Active Measures]] — the broader Russian influence framework - [[Global Intelligence Hub]] — full agency index