Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abuse
As part of its continuous cyberattack against Ukraine throughout 2025, a Russian advanced persistent threat (APT) group has continued to develop and broaden its malware arsenal.
According to Slovakian cybersecurity firm ESET, Gamaredon launched 35 different spear-phishing efforts against new targets, the majority of which occurred in the second part of the year. Ukrainian military and administrative organizations are the main focus of these initiatives.
Gamaredon continued to be quite active and concentrated only on Ukraine throughout 2025, according to ESET. "The exfiltration of sensitive material and other vital data that might be used to further Russian objectives in the current conflict in Ukraine remains the group's ultimate objective.
The spear-phishing tactics leverage XHT...