CVE Tools
Track your stack

Gamaredon in 2025: Leveraging tunnels, workers, dead drops, and new alliances

ESET WeLiveSecurityBy Zoltán Rusnák

ResearchGamaredon
Read at ESET WeLiveSecurity

ESET WeLiveSecurity publishes this story on its own site; we link to it rather than reprint it.

  1. Check Point Research19th October – Threat Intelligence ReportCVE-2025-8088
  2. The Hacker NewsSilent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government AttacksCVE-2025-8088
  3. Cisco TalosBreak the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizationsCVE-2025-8088
  4. Kaspersky SecurelistExploits and vulnerabilities in Q2 2026CVE-2025-8088
  5. BleepingComputerUpdate now: 7-Zip fixes RCE flaw exploitable with malicious archivesCVE-2025-8088
  6. The Hacker NewsGamaredon Expands Ukraine Attacks with New Malware and Cloud Service AbuseCVE-2025-8088
  7. SecurityWeekRussian APT Deploys ‘StockStay’ Backdoor Against Ukrainian TargetsCVE-2025-8088
  8. The Hacker NewsGoogle Details Turla's New STOCKSTAY Backdoor Used in Ukraine Espionage AttacksCVE-2025-8088
  9. Check Point Research15th June – Threat Intelligence ReportCVE-2025-8088
  10. Daily CyberSecurity (securityonline.info)Old WinRAR Flaw Still Fuels Attacks on Ukraine in 2026CVE-2025-8088

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure