Russian Cyber Threat Group Gamaredon Targets Western Military Mission in Ukraine

The Russian-linked cyber threat group, Gamaredon (alias Shuckworm), has been identified as responsible for a cyberattack targeting a foreign military mission based in Ukraine. The goal was to deploy an updated version of the malware known as GammaSteel. The targeted military mission belonged to a Western country, according to the Symantec Threat Hunter team. The first signs of malicious activity were detected on April 1, 2025. The attack used infected removable devices to compromise the mission's systems.