threat-intel
Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abuse
High
Summary
The Gamaredon APT group continued its aggressive cyberattacks against Ukraine throughout 2025, utilizing a range of new malware and exploiting vulnerabilities to steal sensitive information. The group expanded its tactics by leveraging cloud services and developing new PowerShell tools, demonstrating a sophisticated approach to evade detection and support Russian interests in the ongoing conflict. This activity highlights the group's adaptability and reliance on diverse infrastructure to maintain operational security.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data