Gamaredon

ACTINIUM Primitive Bear Armageddon Shuckworm

▲ High Threat

Most active APT targeting Ukraine, over 5000 phishing attacks against Ukrainian entities

Origin Russia

Sponsor FSB (Federal Security Service)

Active Since 2013

Motivation Espionage, Sabotage (Ukraine-focused)

Target Sectors

Ukraine government Military NGOs Law enforcement

Spear-phishing

USB worms

Pterodo backdoor

Credential harvesting

High-volume low-sophistication attacks

Hacking the mainframe…