Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
mastodon.ie is one of the many independent Mastodon servers you can use to participate in the fediverse.
Irish Mastodon - run from Ireland, we welcome all who respect the community rules and members.

Administered by:

Server stats:

1.8K
active users

mastodon.ie: AboutProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.7

#gamaredon

3 posts3 participants0 posts today
Public
PrivacyDigest

#Gamaredon : The Turncoat #Spies Relentlessly #Hacking #Ukraine

For the past decade, this group of #FSB #hackers—including “traitor” #Ukrainian intelligence officers—has used a grinding barrage of #intrusion campaigns to make life hell for their former countrymen and #cybersecurity defenders.
#security #privacy

wired.com/story/gamaredon-turn

WIRED · Gamaredon: The Turncoat Spies Relentlessly Hacking UkraineBy Andy Greenberg
Public
Pyrzout :vm:

Gamaredon targeted the military mission of a Western country based in Ukraine – Source: securityaffairs.com ciso2ciso.com/gamaredon-target #rssfeedpostgeneratorecho #informationsecuritynews #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #BreakingNews #Cyberwarfare #Intelligence #SecurityNews #hackingnews #Gamaredon #hacking #ukraine #Russia #APT

gamaredon-targeted-the-military-mission-of-a-western-country-based-in-ukraine-–-source:-securityaffairs.com
CISO2CISO.COM & CYBER SECURITY GROUP · Gamaredon targeted the military mission of a Western country based in Ukraine – Source: securityaffairs.comSource: securityaffairs.com - Author: Pierluigi Paganini Gamaredon targeted a foreign military mission in Ukraine with updated GammaSte
Public
Pyrzout :vm:

Russia-linked Gamaredon targets Ukraine with Remcos RAT – Source: securityaffairs.com ciso2ciso.com/russia-linked-ga #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #BreakingNews #Cyberwarfare #SecurityNews #hackingnews #Cybercrime #Gamaredon #RemcosRAT #hacking #Malware #ukraine #Russia

russia-linked-gamaredon-targets-ukraine-with-remcos-rat-–-source:-securityaffairs.com
CISO2CISO.COM & CYBER SECURITY GROUP · Russia-linked Gamaredon targets Ukraine with Remcos RAT – Source: securityaffairs.comSource: securityaffairs.com - Author: Pierluigi Paganini Russia-linked Gamaredon targets Ukraine with a phishing campaign using troop-r
Public
OTX Bot

Gamaredon Targets Troops via Malware

Pulse ID: 67eb266fe6461777fb05efa7
Pulse Link: otx.alienvault.com/pulse/67eb2
Pulse Author: cryptocti
Created: 2025-03-31 23:34:07

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

LevelBlue Open Threat ExchangeLevelBlue - Open Threat ExchangeLearn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.
#CyberSecurity#Gamaredon#InfoSec
Public
OTX Bot

Gamaredon campaign abuses LNK files to distribute Remcos backdoor

A campaign targeting users in Ukraine with malicious LNK files has been observed since November 2024. The files, using Russian words related to troop movements as lures, run a PowerShell downloader contacting geo-fenced servers in Russia and Germany. The second stage payload uses DLL side loading to execute the Remcos backdoor. The activity is attributed to the Gamaredon threat actor group with medium confidence. The campaign uses the invasion of Ukraine as a theme in phishing attempts, distributing LNK files disguised as Office documents. The servers used are mostly hosted by GTHost and HyperHosting ISPs. The attack chain involves DLL sideloading to load the Remcos backdoor, which communicates with a C2 server on a specific port.

Pulse ID: 67e6c6b5e3b5eec595438366
Pulse Link: otx.alienvault.com/pulse/67e6c
Pulse Author: AlienVault
Created: 2025-03-28 15:56:37

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

LevelBlue Open Threat ExchangeLevelBlue - Open Threat ExchangeLearn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.
#BackDoor#CyberSecurity#Gamaredon
Public
Christoffer S.

(talosintelligence.com) Gamaredon APT Targets Ukraine with Remcos Backdoor Using War-Themed Lures blog.talosintelligence.com/gam

Cisco Talos is tracking a campaign targeting Ukrainian users with malicious LNK files that deliver the Remcos backdoor. The campaign, attributed with medium confidence to the Gamaredon APT group, uses Russian-language lures related to troop movements in Ukraine. The attack chain involves LNK files that execute PowerShell code to download a ZIP file containing the Remcos backdoor, which is then executed through DLL side-loading techniques. The attackers use geo-fenced servers in Russia and Germany that restrict access to Ukrainian IP addresses. This represents a continuation of Gamaredon's targeting of Ukrainian entities, though their use of the commercial Remcos backdoor marks a shift from their typical custom tooling.

Cisco Talos Blog · Gamaredon campaign abuses LNK files to distribute Remcos backdoorCisco Talos is actively tracking an ongoing campaign, targeting users in Ukraine with malicious LNK files which run a PowerShell downloader since at least November 2024.
#Cybersecurity#ThreatIntel#Gamaredon
Public
Richi Jennings

Flash drive sharing #malware escapes Україна. #Gamaredon fingered as perps.

A worm spread by sharing #USB drives is breaking free, outside of its primary target. An #APT group tied to the Russian #FSB is said to be responsible—apparently it’s part of #Putin’s #cyberwar against #Ukraine.

#LitterDrifter is at least easily detected and blocked. In today’s #SBBlogwatch, we give thanks for small mercies. At @TechstrongGroup’s @SecurityBlvd: securityboulevard.com/2023/11/

Security Boulevard · ‘LitterDrifter’ Russian USB Worm Leaks from Ukraine War ZoneFSB APT USB VBS LNK DLL: WTH? Flash drive sharing malware escapes Україна. Gamaredon fingered as perps.
Public
securityaffairs

#Russia-linked #APT #Gamaredon starts stealing data from victims between 30 and 50 minutes after the initial compromise
securityaffairs.com/148488/apt
#securityaffairs #hacking

Security AffairsRussia-linked APT Gamaredon starts stealing data from victims between 30 and 50 minutes after the initial compromiseUkraine’s Computer Emergency Response Team (CERT-UA) states that Russia-linked APT Gamaredon starts stealing data 30 minutes after the initial compromise. Ukraine’s Computer Emergency Response Team (CERT-UA) is warning that the Russia-linked APT group Gamaredon (aka Shuckworm, Actinium, Armageddon, Primitive Bear, UAC-0010, and Trident Ursa) use to steal data from victims’ networks in less than an hour after the initial compromise. Gamaredon has […]
Public
securityaffairs

#Russia-linked #APT #Gamaredon update TTPs in recent attacks against #Ukraine
securityaffairs.com/147497/apt
#securityaffairs #hacking #malware #Russia

Security AffairsRussia-linked APT Gamaredon update TTPs in recent attacks against UkraineRussia-linked APT group Gamaredon is using a new toolset in attacks aimed at critical organizations in Ukraine. The Gamaredon APT group (aka Shuckworm, Actinium, Armageddon, Primitive Bear, UAC-0010, and Trident Ursa) continues to carry out attacks against entities in Ukraine, including security services, military, and government organizations. Symantec researchers reported that in some cases, the cyberespionage group remained undetected in the […]
ExploreLive feeds
About