Gamaredon Group
IRON TILDENPrimitive BearACTINIUMArmageddonShuckwormDEV-0157Aqua BlizzardNastyShrew
UnattributedNo public state or group attribution on record
Gamaredon Group is a suspected Russian cyber espionage group that has targeted military, law enforcement, judiciary, non-profit, and non-governmental organizations in Ukraine since at least 2013. The name Gamaredon Group derives from a misspelling of the word "Armageddon," found in early campaigns.
MITRE ATT&CK Techniques
T1001T1005T1012T1016.001T1020T1021.005T1025T1027T1027.004T1027.010T1027.012T1027.015T1027.016T1033T1036.005T1039T1041T1047T1053.005T1055T1057T1059.001T1059.003T1059.005T1070.004T1071.001T1080T1082T1083T1090T1090.003T1091T1095T1102T1102.002T1102.003T1105T1106T1112T1113T1119T1120T1137T1140T1204.001T1204.002T1218.005T1218.011T1221T1480T1491.001T1497.001T1518.001T1534T1547.001T1559.001T1561.001T1564.003T1566.001T1568T1568.001T1571T1583.001T1583.003T1583.006T1587.003T1588.002T1608.001T1620T1685
Associated Malware
PingPowerPunchPteranodonQuietSieveRegRemcos
No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.