Tag: gammawipe

2 Attack Reports | 0 Vulnerabilities

Attack reports

Matryoshka #3/3: Gamaredon's Gammasteel Infostealer

This analysis examines Gamaredon's (UAC-0010, Armagedon) advanced espionage operations targeting Ukrainian government, military, and critical infrastructure. The FSB-operated group deploys GammaSteel, a sophisticated stealer operating almost entirely from memory using Windows DPAPI encryption and s…
infostealer
ukraine
cyberespionage
vbscript
fsb
gammaload
gamaredon
gammasteel
gammaphish
gammaworm
2026-06-04
gammawipe
dead-drop-resolver
dpapi
usb-propagation
Published: June 4, 2026
Downloadable IOCs: 2

FSB’s matryoshka #2/3 – Gamaredon’s gifts that keeps unpacking – GammaLoad

Gamaredon, an FSB-operated cyberespionage group, continues targeting Ukrainian government, military, and critical infrastructure through sophisticated multi-stage infection chains. This analysis examines GammaLoad, a collection of VBScript loaders that establish continuous access through three dist…
fsb
gammaload
gamaredon
gammasteel
gammaphish
gammaworm
2026-06-03
gammawipe
Published: June 3, 2026
Downloadable IOCs: 1
Click here to see more Attack Reports