<ul><li>Gamaredon, a Russia-linked APT group, targeted a foreign military mission based in Ukraine.</li><li>The group used an updated version of the GamaSteel infostealer, with the campaign starting in February 2025.</li><li>The initial infection vector used was an infected removable drive.</li><li>The group's campaign demonstrates a laser-like focus on targeting entities within Ukraine for espionage purposes.</li></ul>

Gamaredon targeted the military mission of a Western country based in Ukraine

Discover more