[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUrLFhXSnVPNGuxPsg_cXPr3eCosh3cdgxuHeo_6laRk":3},{"article":4,"iocs":37},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":11,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":22,"category":23,"article_tags":26},"a2baffe0-ba22-477d-b810-7bdd95b12771","Gamaredon is one of the most active espionage actors targeting Ukraine. The group relies on relen...","gamaredon-is-one-of-the-most-active-espionage-actors-targeting-ukraine-the-group-1f56f4","Gamaredon is one of the most active espionage actors targeting Ukraine. The group relies on relentless spearphishing and fast operational tempo to compromise military and government organizations. That access is what Turla exploited.\n\nThe research also examines Kazuar v2 and v3 —","Gamaredon is a highly active threat actor conducting persistent espionage operations against Ukrainian military and government organizations through relentless spearphishing and rapid operational tempo. The research reveals that the Russian-linked Turla group has exploited Gamaredon's initial access to extend their own operations. The analysis also covers Kazuar malware variants v2 and v3.","Gamaredon espionage group exploited by Turla in attacks on Ukrainian military and government.",null,"https:\u002F\u002Fx.com\u002FSentinelOne\u002Fstatus\u002F2061896238023454795","2026-06-02T19:42:25+00:00","2026-06-02T20:00:08.527325+00:00",8,[17,20],{"name":18,"type":19},"Gamaredon","threat_actor",{"name":21,"type":19},"Turla","6cbdd207-aaa1-4176-9534-e156b125e917",{"id":22,"icon":11,"name":24,"slug":25},"Nation-state","nation-state",[27,32],{"category":28},{"id":29,"icon":11,"name":30,"slug":31},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":33},{"id":34,"icon":11,"name":35,"slug":36},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[38,41],{"type":31,"value":39,"context":40},"Kazuar","Information-stealing malware variants v2 and v3 analyzed in research; associated with Turla operations",{"type":31,"value":18,"context":42},"Ukrainian espionage group conducting spearphishing campaigns against military and government targets"]