Cyber Sibling Rivalry: Gamaredon and Turla Join Forces in Ukraine’s Digital Battlefield
ESET uncovers a rare collaboration between Russia-linked groups Gamaredon and Turla. These groups teamed up in cyberattacks on Ukraine, combining tools to increase impact on critical systems during a tense geopolitical climate. The first technical link marks a new level of coordination between these two cyberespionage actors.
Hot Take:
It looks like Russia’s cyber snoops are playing a high-stakes game of “Who Can Hack It Better?” with their new dream team, Gamaredon and Turla. Ukraine, brace yourself for a cyber tango where the malware dance partners are anything but graceful!
Key Points:
- Russia-linked groups Gamaredon and Turla collaborated in cyberattacks on Ukraine between February and April 2025.
- Gamaredon, known for its noisy attacks, provided access for Turla, who focused on high-value espionage targets.
- This collaboration marks the first technical link between the two notorious cyberespionage groups.
- Gamaredon initially breached systems, with Turla deploying the sophisticated Kazuar malware afterward.
- ESET released IoCs and samples to help combat these cyber intrusions.
Already a member? Log in here