Russian-Linked APT Gamaredon Targets Foreign Military Mission in Ukraine with Updated GammaSteel Malware

The Russian-linked APT group Gamaredon targeted a foreign military mission in Ukraine on February 26, 2025, using an updated version of the GammaSteel malware, according to Symantec. Researchers from Symantec Threat Hunter reported that the group, also known as Shuckworm, Armageddon, Primitive Bear, ACTINIUM, and Callisto, utilized this updated version of the GammaSteel infostealer software. Gamaredon is known for targeting government entities.