Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
espionage
RussiaThreat Actor
RussiaThreat ActorActive Threat
Gamaredon
1.8k
IOCs Tracked
72
Intel Reports
Associated IOCs50 total
MD549
4a56527354c7c89c019c75f44ac9c59d2026-06-19High
1009d77a9608c6f09836d036afeb965e2026-06-19High
7c126464936271487e70dcb399dad9722026-06-19High
7dd2c7d92de1151e7655d3976bc244212026-06-20High
73a80c10469570b4f47d427080ead1bd2026-06-19High
7f5f1401d39e17881c06673511f797492026-06-19High
afc5ff8a6f0dfb25d7376c72b4b82deb2026-06-19High
8b7bcf8ba30a4c638451c39768fdd3642026-06-18High
decab741dc4b7e05796dd3ccc7eeaa5f2026-06-18High
a17c290e50336f74767e543b431d0a942026-06-18High
7918092f7b3c90b56645cfd0acd3db272026-06-18High
7551cf6a6d8cff8fab7865737f7563ea2026-06-18High
ceb55e44792cf44199ea2736a40b74c02026-06-20High
2e44fecbd70c49bb93d8d155e9d88faf2026-06-19High
24668615909ab739a817687fa924947c2026-06-18High
de83989b47a6bdadefa5b1f4bf2f39d82026-06-18High
3787720d8b9000d0712f4ef15aaba8902026-06-19High
f8d6f37e15ec3b2b25e2321889523fce2026-06-18High
2d1a4f6cb193a8e42bf98a0dbcd3e33d2026-06-18High
7ebac61fe341cd83da8f723f857db0452026-06-18High
45133131734124f5a6d80cbff92408a02026-06-18High
79fbbef2b926f9881fc3529abc6a034f2026-06-18High
77046f3cc9293cbc39fd4f15df48a2462026-06-18High
e0d11ceeea97268c72e6fc51c9e98dea2026-06-19High
2cb876d4c6e1717681c4d55162233e3f2026-06-19High
744ce2fe733eae964d0469c7be5912de2026-06-20High
84a4b9e51f1676b6ea94671cb7b458b52026-06-19High
d677b371a882496bbb8b5d8b03c876f42026-06-20High
f7d20fbf17db580cca10e474b238a1ff2026-06-19High
490e8df97223d29286baa953dc7f4c712026-06-19High
73d4ab07aa34cebb7d5e4bdcf2e9ce262026-06-19High
9c4c007920fa7e04debce6904158b6362026-06-20High
95df7aefbe40b7ff15dcd388d60448f42026-06-18High
5b8c7a667e635000d00ba5a5ca44521b2026-06-18High
083e59fbf99b73594e6125e3182b4f4f2026-06-18High
a4464302ef2e69505f98a5f3dccdee442026-06-18High
ff1e1cd1779e62d3ed843d567414f3b42026-06-18High
63bdfee62fa61945c6feec5e649fdb742026-06-18High
67d7defdc42dc78efb39cd379d57bc122026-06-18High
a0698c2c4db3918e0fd9c4bfaece17982026-06-19High
0fe35ce71b049eb3615d35fe5cecf0942026-06-18High
9394487225859e7dbe1daad782a831832026-06-18High
815305fe661f5a9db907d39c3041ba572026-06-18High
5b600b64bbf3d8a39872d1d6b9ab54412026-06-19High
f709881aeb16300d223701287c7a04e92026-06-18High
1284ad4cd8d97aa25d06f841f62484bf2026-06-20High
0bb18e2cdcd593bcad15bae3a506256a2026-06-18High
c39dac054a2907b5f815703d0705b0772026-06-19High
d8da477285856b28198574da59a1003e2026-06-20High
SHA2561
8de34006dafd990853a45cbe9aaab4ee18c8cd4c1ad0a98fe71f8d63cd60db252026-06-24High
Related Reports72 total
NSFOCUS Monthly APT Insights – June 2026
NSFOCUS Security LabsSep 1, 2026
Tracking UAC-0226 Tooling Evolution: From WinRAR ADS to Reflective GIFTEDCROOK Loading
Synaptic SystemsJun 24, 2026
GhostShell (MB-0009): Targeting Ukraine’s UAV Operations and Defense Supply Chain
Synaptic SystemsJun 22, 2026
Abuse.ch MalwareBazaar (695 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (689 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (721 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (723 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (706 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (700 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (702 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (698 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (786 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (788 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (788 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (805 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (806 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (807 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (807 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (807 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (803 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (785 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (810 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (810 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (804 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (819 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (897 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (887 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (864 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (829 samples)
Abuse.ch MalwareBazaar
Abuse.ch MalwareBazaar (759 samples)
Abuse.ch MalwareBazaar
Threat Profile
Motivationespionage
OriginRussia
RussiaLast seenSep 2026
IOCs tracked1,793