Gamaredon Archives • Daily CyberSecurity

Gamaredon Exploits WinRAR Path Traversal to Unleash GammaDrop Malware The Gentlemen Ransomware Leak Rocket Database RaaS

Gamaredon Exploits WinRAR Path Traversal to Unleash GammaDrop Malware

Do Son May 18, 2026

A new investigation has unmasked a relentless spearphishing campaign by the Russian-aligned threat actor Gamaredon, exposing their...

Gamaredon’s PteroLNK Malware: Stealthy Espionage Tactics Uncovered Gamaredon, PteroLNK

Gamaredon’s PteroLNK Malware: Stealthy Espionage Tactics Uncovered

Do Son April 18, 2025

A recent deep-dive analysis by HarfangLab uncovers new insights into the persistent and ever-evolving operations of Gamaredon,...

Shuckworm’s Sophisticated Cyber Campaign Targets Ukraine Military Mission Mercenary Akula European Financial Targeting AI-Generated Malware React2Shell Exploit UAT-8837 Critical Infrastructure Attack APT36, BOSS Linux BRICKSTORM Malware, China Espionage Curly COMrades, MucorAgent Chinese APT - HTTP Client Tools Shuckworm Cyber Espionage

Mercenary Akula European Financial Targeting AI-Generated Malware React2Shell Exploit UAT-8837 Critical Infrastructure Attack APT36, BOSS Linux BRICKSTORM Malware, China Espionage Curly COMrades, MucorAgent Chinese APT - HTTP Client Tools Shuckworm Cyber Espionage

Shuckworm’s Sophisticated Cyber Campaign Targets Ukraine Military Mission

Do Son April 10, 2025

Russia-linked espionage group Shuckworm (also known as Gamaredon or Armageddon) has launched a renewed and more sophisticated...

Gamaredon Exploits Troop Movement Lures to Spread Remcos via DLL Sideloading Seedworm Espionage Campaign 2026 ChromElevator Stealer DLL Sideloading SIM Swapping Crypto Theft Lazarus Comebacker, Aerospace Espionage Delete PlugX Malware

Seedworm Espionage Campaign 2026 ChromElevator Stealer DLL Sideloading SIM Swapping Crypto Theft Lazarus Comebacker, Aerospace Espionage Delete PlugX Malware

Gamaredon Exploits Troop Movement Lures to Spread Remcos via DLL Sideloading

Do Son March 31, 2025

A new targeted malware campaign linked to the Russian state-aligned group Gamaredon is exploiting Windows shortcut (.LNK)...

Gamaredon APT Deploys Two Russian Android Spyware Families: BoneSpy and PlainGnome RedLineCyber Clipboard Hijacker TangleCrypt Packer, STONESTOP EDR Killer Gamaredon APT - BoneSpy and PlainGnome