Overall #Gamaredon activity dropped sharply from mid-May through September, possibly due to 🇺🇦 strikes on Crimea, where the group is believed to operate. Despite the slowdown, Gamaredon updated its file stealer #PteroBox. 2/4
October 30, 2026 at 8:47 AM
Overall #Gamaredon activity dropped sharply from mid-May through September, possibly due to 🇺🇦 strikes on Crimea, where the group is believed to operate. Despite the slowdown, Gamaredon updated its file stealer #PteroBox. 2/4
Overall #Gamaredon activity dropped sharply from mid-May through September, possibly due to 🇺🇦 strikes on Crimea, where the group is believed to operate. Despite the slowdown, Gamaredon updated its file stealer #PteroBox…
— from @ESETresearch (https://x.com/ESETresearch/status/2116089497431556263)
— from @ESETresearch (https://x.com/ESETresearch/status/2116089497431556263)
October 30, 2026 at 8:57 AM
Overall #Gamaredon activity dropped sharply from mid-May through September, possibly due to 🇺🇦 strikes on Crimea, where the group is believed to operate. Despite the slowdown, Gamaredon updated its file stealer #PteroBox…
— from @ESETresearch (https://x.com/ESETresearch/status/2116089497431556263)
— from @ESETresearch (https://x.com/ESETresearch/status/2116089497431556263)
Belarus-aligned FrostyNeighbor goes destructive for the first time in Europe, per ESET's APT report. https://intel.threadlinqs.com/threat/TL-2026-4705?utm_source=bluesky #ThreatIntel #DarkVigil #PteroBox #PteroPSDoor
October 29, 2026 at 5:37 AM
Belarus-aligned FrostyNeighbor goes destructive for the first time in Europe, per ESET's APT report. https://intel.threadlinqs.com/threat/TL-2026-4705?utm_source=bluesky #ThreatIntel #DarkVigil #PteroBox #PteroPSDoor
Another notable addition is PteroBox, a new PowerShell-based file stealer that exfiltrates files to Dropbox. It prioritizes sensitive documents, tracks exfiltrated files via MD5 hashes, and monitors USB insertions through WMI events. 7/9
July 2, 2025 at 10:49 AM
Another notable addition is PteroBox, a new PowerShell-based file stealer that exfiltrates files to Dropbox. It prioritizes sensitive documents, tracks exfiltrated files via MD5 hashes, and monitors USB insertions through WMI events. 7/9
Nation-state APTs ramp up attacks on Ukraine and the EU
Russian APT groups intensified attacks against Ukraine and the EU, exploiting zero-day vulnerabilities and deploying wipers, according to ESET. Ukraine faces rising cyber threats The Russia-aligned Sandworm group intensifie…
#hackernews #news
Russian APT groups intensified attacks against Ukraine and the EU, exploiting zero-day vulnerabilities and deploying wipers, according to ESET. Ukraine faces rising cyber threats The Russia-aligned Sandworm group intensifie…
#hackernews #news
Nation-state APTs ramp up attacks on Ukraine and the EU
Russian APT groups intensified attacks against Ukraine and the EU, exploiting zero-day vulnerabilities and deploying wipers, according to ESET. Ukraine faces rising cyber threats The Russia-aligned Sandworm group intensified destructive operations against Ukrainian energy companies, deploying a new wiper named ZEROLOT. Gamaredon remained the most prolific actor targeting Ukraine, enhancing malware obfuscation and introducing PteroBox, a file stealer leveraging Dropbox. “The infamous Sandworm group concentrated heavily on compromising Ukrainian energy infrastructure. In recent cases, it …
www.helpnetsecurity.com
May 22, 2025 at 12:37 AM
Nation-state APTs ramp up attacks on Ukraine and the EU
Russian APT groups intensified attacks against Ukraine and the EU, exploiting zero-day vulnerabilities and deploying wipers, according to ESET. Ukraine faces rising cyber threats The Russia-aligned Sandworm group intensifie…
#hackernews #news
Russian APT groups intensified attacks against Ukraine and the EU, exploiting zero-day vulnerabilities and deploying wipers, according to ESET. Ukraine faces rising cyber threats The Russia-aligned Sandworm group intensifie…
#hackernews #news