Russian Cyber Tango: Gamaredon and Turla Team Up in Ukraine Hacks!
Russian state-sponsored threat actors Gamaredon and Turla are teaming up like a cyber Bonnie and Clyde. Gamaredon deploys Turla malware on Ukrainian targets, proving that two heads (or bears) are better than one when it comes to digital espionage. ESET found their collaboration traces back to the Cold War era—talk about a throwback partnership!

Hot Take:
When it comes to cyber espionage, Russia seems to be taking a page out of the buddy cop movie playbook. Gamaredon and Turla, two notorious Russian cybercrime duos, are teaming up for a sequel no one asked for, targeting Ukrainian entities with more precision than a synchronized swimming team. Who knew state-sponsored cybercriminals could teach us the value of teamwork? Now if only they could use their powers for good, like saving the world from annoying pop-up ads or ensuring no one ever gets stuck in an endless tech support call again!
Key Points:
- Two Russian state-sponsored groups, Gamaredon and Turla, are collaborating on cyberattacks against Ukraine.
- Gamaredon’s tools have been used to deploy and restart Turla malware on Ukrainian systems between February and April 2025.
- Turla targets high-profile entities globally, while Gamaredon focuses primarily on Ukraine.
- Both groups have ties to the Russian intelligence service FSB, operating under different centers.
- The collaboration between these groups harks back to the Cold War era of espionage.