MEDIUMApt
Global

Russia's Gamaredon Adapts Tactics to Target Ukraine

·Source: Bank Info Security

Updated:

Executive Summary

Eset Documents New Malware Families and Infrastructure Tactics Eset found Russia's FSB-linked Gamaredon expanded its malware toolkit, launched dozens of spear-phishing campaigns, and increasingly relied on legitimate cloud,

Analysis

Eset Documents New Malware Families and Infrastructure Tactics Eset found Russia's FSB-linked Gamaredon expanded its malware toolkit, launched dozens of spear-phishing campaigns, and increasingly relied on legitimate cloud, tunneling and social platforms to conceal C2 infrastructure, exfiltrate data and sustain espionage operations targeting Ukraine.

Indicators of Compromise (2)

URL (1)
https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/russias-gamaredon-adapts-tactics-to-target-ukraine-image_small-9-a-32068.jpg
VirusTotalURLhaus
Domain (1)
ismg-cdn.nyc3.cdn.digitaloceanspaces.com
VirusTotalURLhaus
Source Attribution

Originally published by Bank Info Security on Jun 25, 2026.

Related Threats

CRITICALApt

Chinese-Speaking APT Deploys New TinyRCT Backdoor in Southeast Asia Campaign

A Chinese-speaking advanced persistent threat (APT) actor has been linked to a new custom backdoor called TinyRCT as part of cyber attacks aimed at government entities and critical infrastructure in Southeast Asia. The activity, particularly aimed at state-owned enterprises in the energy and government sectors, has been attributed to a threat actor called CL-STA-1062, which Palo Alto Networks

The Hacker News
CRITICALApt

Cyberattacks pose a ‘threat to life’ in Australia

Australia’s Security Intelligence Organization (ASIO) has uncovered an attack on a critical infrastructure operator’s network. State-sponsored actors had compromised the network and were preparing to sabotage it, according to its director general, Mike Burgess. Other countries face similar cyber-threats to critical infrastructure . It’s impossible to exaggerate the danger that the country is facin

CSO Online
MEDIUMApt

Turla group adds more malware to Russia’s espionage efforts against Ukraine

Threat intelligence researchers at Google described StockStay, the latest malware developed by the Russian cyber-espionage group known as Turla.

The Record