Russian hackers have used the infrastructure of other threat actors to gather intelligence in Ukraine.The Russian group known as Turla, Waterbug, Snake, or Venomous Bear has targeted front-line Ukrainian military forces.They have leveraged the infrastructure of cybercrime group Storm-1919 and Russian threat actor Storm-1837.The hackers' usual means of access is spear phishing, but the use of other threat actors' infrastructure is unusual.