GamaCopy Mimics Gamaredon Tactics in Cyber Espionage Targeting Russian Entities
In its cyberattacks against Russian-speaking entities, an as-yet-unidentified threat actor has been seen imitating the tradecraft of the Kremlin-aligned Gamaredon hacking gang.
The campaign has been linked to a threat cluster called GamaCopy, which is thought to have similarities with Core Werewolf, another hacker collective that is also known as Awaken Likho and PseudoGamaredon.
The Knownsec 404 Advanced Threat Intelligence team claims that the assaults use military-related content as baits to release UltraVNC, which gives threat actors remote access to the compromised servers.
In a paper released last week, the corporation claimed that its TTP read more about GamaCopy Mimics Gamaredon Tactics in Cyber Espionage Targeting Russian Entities.
Get up to date on the latest cyberse...