#gamaredon — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #gamaredon, aggregated by home.social.
-
The second and third parts of our investigation into the #Gamaredon, the cyberespionage group operated by the Russian #FSB, are live!
🪆Part 2 — The loaders https://buff.ly/bBYZSKa
🪆Part 3 — The stealer & full infrastructure https://buff.ly/74WHuPd -
The second and third parts of our investigation into the #Gamaredon, the cyberespionage group operated by the Russian #FSB, are live!
🪆Part 2 — The loaders https://buff.ly/bBYZSKa
🪆Part 3 — The stealer & full infrastructure https://buff.ly/74WHuPd -
Gamaredon sfrutta CVE-2025-8088 in WinRAR per distribuire GammaWorm e GammaSteel contro l’Ucraina
Sekoia documenta una campagna di gennaio 2026 del gruppo APT russo Gamaredon: sfruttando CVE-2025-8088 in WinRAR, gli operatori dell'FSB distribuiscono GammaPhish, GammaLoad, GammaWorm e GammaSteel contro target governativi e militari ucraini. La catena usa Telegram come dead drop resolver per il C2 e NTFS Alternate Data Streams per l'evasione, con esfiltrazione finale verso AWS S3. -
Gamaredon sfrutta CVE-2025-8088 in WinRAR per distribuire GammaWorm e GammaSteel contro l’Ucraina
Sekoia documenta una campagna di gennaio 2026 del gruppo APT russo Gamaredon: sfruttando CVE-2025-8088 in WinRAR, gli operatori dell'FSB distribuiscono GammaPhish, GammaLoad, GammaWorm e GammaSteel contro target governativi e militari ucraini. La catena usa Telegram come dead drop resolver per il C2 e NTFS Alternate Data Streams per l'evasione, con esfiltrazione finale verso AWS S3. -
Gamaredon Exploits WinRAR Flaw to Deliver GammaWorm, GammaSteel Malware
Cyber attackers have cleverly exploited a WinRAR flaw to unleash a potent malware duo, GammaWorm and GammaSteel, with the goal of taking control of infected systems and executing malicious scripts. This sneaky tactic, spotted by French cybersecurity firm Sekoia, allows hackers to fingerprint host systems, manipulate network settings, and…
-
FSB’s matryoshka #1/3 – Gamaredon’s gifts that keeps unpacking – GammaPhish and GammaWorm
#Gamaredon #GammaPhish #GammaLoad #GammaWorm #GammaSteel #GammaWipe
https://blog.sekoia.io/fsbs-matryoshka-1-3-gamaredons-gifts-that-keeps-unpacking-gammaphish-and-gammaworm/ -
FSB’s matryoshka #1/3 – Gamaredon’s gifts that keeps unpacking – GammaPhish and GammaWorm
#Gamaredon #GammaPhish #GammaLoad #GammaWorm #GammaSteel #GammaWipe
https://blog.sekoia.io/fsbs-matryoshka-1-3-gamaredons-gifts-that-keeps-unpacking-gammaphish-and-gammaworm/ -
Russia's #FSB-linked #Gamaredon has been hammering Ukraine's government, military & critical infrastructure for over a decade. We went behind the scenes.
Tracked their infrastructure. Recovered artefacts from compromised machines. Here's what we found 🧵 https://buff.ly/6hR2IMj
-
Russia's #FSB-linked #Gamaredon has been hammering Ukraine's government, military & critical infrastructure for over a decade. We went behind the scenes.
Tracked their infrastructure. Recovered artefacts from compromised machines. Here's what we found 🧵 https://buff.ly/6hR2IMj
-
Diverse Threat Actors Exploiting Critical WinRAR Vulnerability CVE-2025-8088
#CVE_2025_8088 #RomComGroup #APT44 #TEMP.Armageddon #Gamaredon #Turla #zeroplayer
https://cloud.google.com/blog/topics/threat-intelligence/exploiting-critical-winrar-vulnerability -
Diverse Threat Actors Exploiting Critical WinRAR Vulnerability CVE-2025-8088
#CVE_2025_8088 #RomComGroup #APT44 #TEMP.Armageddon #Gamaredon #Turla #zeroplayer
https://cloud.google.com/blog/topics/threat-intelligence/exploiting-critical-winrar-vulnerability -
Gamaredon: Now Downloading via Windows Updates Best Friend “BITS”
#Gamaredon
https://blog.synapticsystems.de/gamaredon-now-downloading-via-windows-updates-best-friend/ -
Gamaredon: Now Downloading via Windows Updates Best Friend “BITS”
#Gamaredon
https://blog.synapticsystems.de/gamaredon-now-downloading-via-windows-updates-best-friend/ -
Two of the world’s most prolific state-linked #cybercrime groups — #russia’s #Gamaredon and #NKorea’s #Lazarus collective — have been spotted sharing resources.
Experts found overlapping #tactics and shared #infrastructure between the two groups.
https://www.politico.eu/article/russia-north-korea-partner-cyber-crime-research-gamaredon-lazarus/
-
Two of the world’s most prolific state-linked #cybercrime groups — #russia’s #Gamaredon and #NKorea’s #Lazarus collective — have been spotted sharing resources.
Experts found overlapping #tactics and shared #infrastructure between the two groups.
https://www.politico.eu/article/russia-north-korea-partner-cyber-crime-research-gamaredon-lazarus/
-
Two of the Kremlin’s most active hack groups are collaborating, ESET says - Two of the Kremlin’s most active hacking units recently were... - https://arstechnica.com/security/2025/09/two-of-the-kremlins-most-active-hack-groups-are-collaborating-eset-says/ #advancedpersistentthreat #gamaredon #security #biz #russia #turla #apt
-
Two of the Kremlin’s most active hack groups are collaborating, ESET says - Two of the Kremlin’s most active hacking units recently were... - https://arstechnica.com/security/2025/09/two-of-the-kremlins-most-active-hack-groups-are-collaborating-eset-says/ #advancedpersistentthreat #gamaredon #security #biz #russia #turla #apt
-
Turla and Gamaredon Working Together in Fresh Ukrainian Intrusions https://www.securityweek.com/turla-and-gamaredon-working-together-in-fresh-ukrainian-intrusions/ #Malware&Threats #Gamaredon #malware #Ukraine #Russia #Turla
-
Turla and Gamaredon Working Together in Fresh Ukrainian Intrusions https://www.securityweek.com/turla-and-gamaredon-working-together-in-fresh-ukrainian-intrusions/ #Malware&Threats #Gamaredon #malware #Ukraine #Russia #Turla
-
Turla and Gamaredon Working Together in Fresh Ukrainian Intrusions https://www.securityweek.com/turla-and-gamaredon-working-together-in-fresh-ukrainian-intrusions/ #Malware&Threats #Gamaredon #malware #Ukraine #Russia #Turla
-
Turla and Gamaredon Working Together in Fresh Ukrainian Intrusions https://www.securityweek.com/turla-and-gamaredon-working-together-in-fresh-ukrainian-intrusions/ #Malware&Threats #Gamaredon #malware #Ukraine #Russia #Turla
-
#Gamaredon : The Turncoat #Spies Relentlessly #Hacking #Ukraine
For the past decade, this group of #FSB #hackers—including “traitor” #Ukrainian intelligence officers—has used a grinding barrage of #intrusion campaigns to make life hell for their former countrymen and #cybersecurity defenders.
#security #privacyhttps://www.wired.com/story/gamaredon-turncoat-spies-hacking-ukraine/
-
#Gamaredon : The Turncoat #Spies Relentlessly #Hacking #Ukraine
For the past decade, this group of #FSB #hackers—including “traitor” #Ukrainian intelligence officers—has used a grinding barrage of #intrusion campaigns to make life hell for their former countrymen and #cybersecurity defenders.
#security #privacyhttps://www.wired.com/story/gamaredon-turncoat-spies-hacking-ukraine/
-
Gamaredon targeted the military mission of a Western country based in Ukraine – Source: securityaffairs.com https://ciso2ciso.com/gamaredon-targeted-the-military-mission-of-a-western-country-based-in-ukraine-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #BreakingNews #Cyberwarfare #Intelligence #SecurityNews #hackingnews #Gamaredon #hacking #ukraine #Russia #APT
-
Gamaredon targeted the military mission of a Western country based in Ukraine – Source: securityaffairs.com https://ciso2ciso.com/gamaredon-targeted-the-military-mission-of-a-western-country-based-in-ukraine-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #BreakingNews #Cyberwarfare #Intelligence #SecurityNews #hackingnews #Gamaredon #hacking #ukraine #Russia #APT
-
Gamaredon Uses Infected Removable Drives to Breach Western Military Mission in Ukraine – Source:thehackernews.com https://ciso2ciso.com/gamaredon-uses-infected-removable-drives-to-breach-western-military-mission-in-ukraine-sourcethehackernews-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #TheHackerNews #Gamaredon
-
Gamaredon Uses Infected Removable Drives to Breach Western Military Mission in Ukraine – Source:thehackernews.com https://ciso2ciso.com/gamaredon-uses-infected-removable-drives-to-breach-western-military-mission-in-ukraine-sourcethehackernews-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #TheHackerNews #Gamaredon
-
State-Sponsored Tactics: How Gamaredon and ShadowPad Operate and Rotate Their Infrastructure
#Gamaredon #RedFoxtrot #ShadowPad
https://hunt.io/blog/state-sponsored-activity-gamaredon-shadowpad -
The russia-backed #Gamaredon group targets Ukraine once again in the ongoing campaign that employs DLL sideloading and exploits LNK files to spread #Remcos backdoor. Detect related #APT attacks with #Sigma rules from SOC Prime Platform.
https://socprime.com/blog/gamaredon-campaign-detection/?utm_source=x&utm_medium=social&utm_campaign=latest-threats&utm_content=blog-post -
Gamaredon Campaign Detection: russia-backed APT Group Targets Ukraine Using LNK Files to Spread Remcos Backdoor – Source: socprime.com https://ciso2ciso.com/gamaredon-campaign-detection-russia-backed-apt-group-targets-ukraine-using-lnk-files-to-spread-remcos-backdoor-source-socprime-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #Latestthreats #socprimecom #Gamaredon #Phishing #socprime #Remcos #Blog #APT
-
Gamaredon Campaign Detection: russia-backed APT Group Targets Ukraine Using LNK Files to Spread Remcos Backdoor – Source: socprime.com https://ciso2ciso.com/gamaredon-campaign-detection-russia-backed-apt-group-targets-ukraine-using-lnk-files-to-spread-remcos-backdoor-source-socprime-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #Latestthreats #socprimecom #Gamaredon #Phishing #socprime #Remcos #Blog #APT
-
Russia-linked Gamaredon targets Ukraine with Remcos RAT – Source: securityaffairs.com https://ciso2ciso.com/russia-linked-gamaredon-targets-ukraine-with-remcos-rat-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #BreakingNews #Cyberwarfare #SecurityNews #hackingnews #Cybercrime #Gamaredon #RemcosRAT #hacking #Malware #ukraine #Russia
-
Russia-linked Gamaredon targets Ukraine with Remcos RAT – Source: securityaffairs.com https://ciso2ciso.com/russia-linked-gamaredon-targets-ukraine-with-remcos-rat-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #BreakingNews #Cyberwarfare #SecurityNews #hackingnews #Cybercrime #Gamaredon #RemcosRAT #hacking #Malware #ukraine #Russia
-
Gamaredon campaign abuses LNK files to distribute Remcos backdoor
#Gamaredon #Remcos
https://blog.talosintelligence.com/gamaredon-campaign-distribute-remcos/ -
GamaCopy targets Russia mimicking Russia-linked Gamaredon APT – Source: securityaffairs.com https://ciso2ciso.com/gamacopy-targets-russia-mimicking-russia-linked-gamaredon-apt-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #BreakingNews #SecurityNews #GamaCopyAPT #hackingnews #Gamaredon #hacking #Malware #APT
-
GamaCopy targets Russia mimicking Russia-linked Gamaredon APT – Source: securityaffairs.com https://ciso2ciso.com/gamacopy-targets-russia-mimicking-russia-linked-gamaredon-apt-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #BreakingNews #SecurityNews #GamaCopyAPT #hackingnews #Gamaredon #hacking #Malware #APT
-
Cyberespionage the Gamaredon way: Analysis of toolset used to spy on Ukraine in 2022 and 2023
#Gamaredon
https://www.welivesecurity.com/en/eset-research/cyberespionage-gamaredon-way-analysis-toolset-used-spy-ukraine-2022-2023/