KPMGインドが毎月発行している、サイバー攻撃に関する脅威インテリジェンス情報の日本語版です。本稿では、2026年6月9日付けの情報を紹介します。

Spear phishing à grande échelle, renouvellement permanent des malwares, détournement de Discord, OneDrive ou de VPN légitimes… Dans ce nouvel épisode d’INCYBER Voices, Mathieu Tartare, chercheur chez ESET, décrypte les modes opératoires de Gamaredon et WebWorm. Deux groupes APT aux méthodes différentes, qui permettent d’entrer dans les coulisses du cyberespionnage russe et chinois.

El grupo de ciberespionaje ruso conocido como Gamaredon ha intensificado sus ataques contra Ucrania durante 2025, incorporando nuevas herramientas maliciosas y abusando de servicio…

Two Russian state-sponsored threat actors have been working together in recent cyberattacks against Ukrainian targets.

The Russian state-backed hacking group Gamaredon (aka "Shuckworm") has been targeting a military mission of a Western country in Ukraine in attacks likely deployed from removable drives.

Russian cyberspies Gamaredon has been discovered using two Android spyware families named 'BoneSpy' and 'PlainGnome' to spy on and steal data from mobile devices. [...]

Russian cyberspies Gamaredon has been discovered using two Android spyware families named 'BoneSpy' and 'PlainGnome' to spy on and steal data from mobile devices. [...]

Researchers at the Lookout Threat Lab have uncovered two sophisticated Android spyware families, BoneSpy and PlainGnome, attributed to the Russian-aligned Advanced Persistent Threat (APT) group Gamaredon. Also known as Primitive... The post Gamaredon APT Deploys Two Russian Android Spyware Families: BoneSpy and PlainGnome appeared first on Cybersecurity News.

The FSB state-sponsored operation has gotten a lot better at loading its malware and hiding its servers.

Detect Gamaredon APT attacks against Ukraine using malicious LNK files to spread Remcos backdoor with Sigma rules from SOC Prime Platform.

HarfangLab hat eine Angriffskampagne durch die russische Gruppe Gamaredon identifiziert, deren Angriffe sich gegen ukrainische Militärstellen richten.

Tras el cero energético, el ciberataque quedó descartado. Pero el presidente Sánchez dejó la puerta entreabierta al contradecir a Red Eléctrica. El CNI investiga. Los delincuentes informátic0s han ido ya a por empresas de energía, con robos de bases de datos y documentación sensible. España está bajo embate, sí, pero el ataque se repele Leer

El grupo de hackers Gamaredon (también conocido como “Shuckworm”) respaldado por el estado ruso, ha atacado una misión militar de un país occidental en

But ESET said its most likely hypothesis is that Turla and Gamaredon were working together. “Given that both groups are part of the Russian FSB (though in two different Centers), Gamaredon provided access to Turla operators so that they could issue commands on a specific machine to restart Kazuar, and deploy Kazuar v2 on some others,” the company said. Friday’s post noted that Gamaredon has been seen collaborating with other hack groups previously, specifically in 2020 with a group ESET tracks under the name InvisiMole. In February, ESET said, company researchers spotted four distinct Gamaredon-Turla co-compromises in Ukraine.

Since Russia’s full-scale invasion of Ukraine in February 2022, cyberespionage has performed an important function within the broader threatscape. Russia-aligned superior persistent risk (APT) teams have relentlessly focused Ukrainian entities, using cyberattacks alongside disinformation campaigns. ESET Analysis has carefully monitored these actions, recurrently documenting cyber-operations carried out by varied risk actors, together with the extremely energetic Gamaredon group. Key factors of this blogpost:

For the past decade, this group of FSB hackers—including “traitor” Ukrainian intelligence officers—has used a grinding barrage of intrusion campaigns to make life hell for their former countrymen and ...

Урядова команда реагування на комп’ютерні надзвичайні події України, яка функціонує в складі Державної слу�...

Gamaredon targets Ukraine with Remcos RAT via phishing using LNK files tied to reused infrastructure.

For the past decade, this group of FSB hackers—including “traitor” Ukrainian intelligence officers—has used a grinding barrage of intrusion campaigns to make life hell for their former countrymen and ...