• Also known as the Gamaredon Group and Primitive Bear.
A Russian-linked threat group known as Gamaredon uses custom-developed malware in attacks aimed at Ukraine. The group has been active since at least 2013. Also known as Invisimole.
Suspected victims
  • Ukraine
Suspected state sponsor
  • Russian Federation
Type of incident
  • Espionage
Target category
  • Government