Cyberespionage the Gamaredon way: Analysis of toolset used to spy on Ukraine in 2022 and 2023
ID: a67be731-b098-5387-a9b1-93ca398d79c3
STIX ID: report--a67be731-b098-5387-a9b1-93ca398d79c3
Feed Name: WeLiveSecurity (ESET Research)
Threat Score
ESET Research presents a technical analysis of Gamaredon’s 2022–2023 cyberespionage activities targeting Ukraine, detailing the group’s evolving toolset (VBScript/PowerShell, downloaders, backdoors, stealers such as PteroBleed), operational tactics (spearphishing, weaponized documents/USBs, fast-flux DNS, frequent C2/domain rotation), and observed scale (over a thousand unique infected machines), and provides IoCs and a full white paper for deeper technical detail.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.