Gamaredon, a Russian threat actor group, targeted Ukrainian government authorities. The group used spear-phishing emails to gain initial access and deployed surveillance malware on affected systems.
- Ukrainian government organizations and critical infrastructure facilities, as well as defense, security, and law enforcement agencies
Suspected state sponsor
- Russian Federation
Type of incident