Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
espionage
RussiaThreat Actor
RussiaThreat ActorActive Threat
Gamaredon
1.8k
IOCs Tracked
71
Intel Reports
Associated IOCs50 total
MD550
2fa247aac2109f53d958f5f6a56aec452026-06-19High
5b56cf9d906b79335f3345d0bfa01b832026-06-19High
47c6ca1cf8b705391ec284b7c2b7c1032026-06-19High
189a6b289c59184eed51ee49808614722026-06-07High
a84832ad6c00e3616c3595d9690a49cb2026-06-18High
5c92a537f724217c4aad0f9b45e9860d2026-06-07High
42e91b5fc9811cbf768ece6dc313df1e2026-06-19High
4da79465a5ace2138f70933033aa5bd92026-06-20High
e5748754eb71ae54fac9424312deb20e2026-06-07High
6725ed1bf3badf8e75e44cb003c898102026-06-07High
710bd0b675fdd89bf9909f151a4bdac52026-06-06High
1bad4be7e3519e2c7c04401b948cdffb2026-06-07High
234ce8b2531070f273ececb213be93662026-06-21High
1392b14287699b76bf8910ea4a83cf332026-06-10High
74b94dded04dfaffe409d7055913b0a22026-06-07High
de83989b47a6bdadefa5b1f4bf2f39d82026-06-18High
118600faef8ade5422035324677970ea2026-06-08High
f4b00e75035a494db814eb1ea90a25fb2026-06-07High
e8c82368f5f863c3a4a3d633dc3147d62026-06-20High
2e038a38cdf34371d2b64ddd92b971c02026-06-19High
7921c1aa3ffde420706990cded6dde242026-06-19High
6134189766417a41106eaa4ce24f5fa42026-06-12High
11e3a83a939dfc1a93cba46399ce942a2026-06-19High
6e84e366e3b280484878ee5b94c1dc302026-06-08High
a9b5389e1a4506246ebcd630c0a4c5082026-06-06High
3a07e4e3e1520c62e6b3822acea4fa322026-06-06High
7df8d5da009a5a00d9b90b199b5a80332026-06-07High
1762f50cd96e1c1881bb0494588b0bfd2026-06-18High
b29a133f123b19e27a49d05bf01bf79d2026-06-18High
3ad93e6bf581f150c89cb1c6b11a009e2026-06-11High
cdc707d9d3002b255b378a64866e0c662026-06-06High
07aef2ea126c64fd555d58a906867e7b2026-06-08High
2b5ee82548199a49ff06e001cade2ada2026-06-07High
7deab38d814da83c0c44936d90a2381a2026-06-08High
565b85aad44eda3dcde0aae07ca19cf62026-06-07High
3b8936f7ae7e938a3dcd6bcfbb0b21a52026-06-07High
629f961741fbee0beced217eef514bd92026-06-19High
4a1a81c2283955572bd718a051db4b552026-06-19High
e6cf5f821a8bb4d771421547f6bcb83d2026-06-10High
53f7fb078756ea3ab1d5ef26e16275f62026-06-20High
f35011059ff44acbf9291b95ae47c8eb2026-06-20High
db5cdc035f4f45a3c7f289cfda7fd9732026-06-07High
caed7707fa318902fbe1cf46714671ef2026-06-08High
c9f43c3edd255d8b9600294a9940edd32026-06-11High
af7da81a6fab41f89fc459429dd82acc2026-06-20High
f2cb216149437e365d8ef866e11960c02026-06-06High
84f1a1ecc963cea6838254019acb5c352026-06-07High
c0738cfa4f1488956ef4aef054c3144a2026-06-06High
9dcb41cfb7ae6a76ddec16ba8fef2b942026-06-20High
d834bc370cf6dbe2a31b5f8d97924dd52026-06-07High
Related Reports71 total
Tracking UAC-0226 Tooling Evolution: From WinRAR ADS to Reflective GIFTEDCROOK Loading
Synaptic SystemsJun 24, 2026
GhostShell (MB-0009): Targeting Ukraine’s UAV Operations and Defense Supply Chain
Synaptic SystemsJun 22, 2026
Abuse.ch MalwareBazaar (695 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (689 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (721 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (723 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (706 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (700 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (702 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (698 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (786 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (788 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (788 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (805 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (806 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (807 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (807 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (807 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (803 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (785 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (810 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (810 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (804 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (819 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (897 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (887 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (864 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (829 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (759 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (756 samples)
Abuse.ch MalwareBazaar
Threat Profile
Motivationespionage
OriginRussia
RussiaLast seenJun 2026
IOCs tracked1,793