LABScon25 Replay | Gamaredon x Turla: Unveiling a 2025 Espionage Alliance Targeting Ukraine
ID: 8b78cb78-56d3-5295-9b2a-7d259bd53a08
STIX ID: report--8b78cb78-56d3-5295-9b2a-7d259bd53a08
Threat Score
ESET researchers presented technical evidence at LABScon 2025 that Gamaredon actively enabled Turla to access high-value Ukrainian government and military targets from February to June 2025 by deploying Turla’s Kazuar backdoor using Gamaredon tooling (PteroGraphin, PteroOdd); the talk details direct operational collaboration, deployment chains, and analyses of Kazuar v2/v3 to help defenders correlate initial access with sustained post-compromise espionage.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.