ria.eePDF
Microsoft Word - tale_of_gamaredon_infection.docx
Excerpt
Gamaredon Infection: From Dropper to
Entry
By: CERT-EE / Estonian Information System Authority
Date: 27 January 2021
Tags: malware, Gamaredon, Primitive Bear, Armageddon
Version: 1.0
TLP: WHITE
Summary
Gamaredon (Russian state sponsored) APT group has been active from 2013 and mostly known to target Ukrainian government and military officials with intention to gain access to information.
Since the beginning of 2020 there are reports that APT group has taken advantage of the coronavirus pandemic and used it as a lure to attract victims to open malicious attachments sent with spearphishing emails. Target audience has widened also as found in reports, including European Union mem…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by ria.ee on ria.ee.
Mentioned in the excerpt
On the same topics
- Retrohunting APT37: North Korean APT used VBA self decode technique to inject RokRatMalwarebytes · Published 5 Jan 2021
- Kazuar (Malware Family)Malpedia · Added 18 Oct
- Animal Farm APT and the Shadow of French IntelligenceInfosec Institute · Published 8 Jul 2015
- Darktrace Malware Analysis: Unpacking SnappyBeeDarktrace · Published 3 Feb
