Gamaredon is one of the most active espionage actors targeting Ukraine. The group relies on relen...

Summary

Gamaredon is a highly active threat actor conducting persistent espionage operations against Ukrainian military and government organizations through relentless spearphishing and rapid operational tempo. The research reveals that the Russian-linked Turla group has exploited Gamaredon's initial access to extend their own operations. The analysis also covers Kazuar malware variants v2 and v3.

Indicators of Compromise

• malware — Kazuar
• malware — Gamaredon

Entities