GAMAREON: The Turncoat Pamies penetrates unabated Ukraine

Crosses in the Russian state, Perhaps more than those in any other nation, tend to appear. the The notorious sandworm unit Within the Military Intelligence Agency in Russia, for example, it has sparked unprecedented power outages and issued a devastating and compatible symbol. FSB Torla Group is brilliant Online satellite connections were kidnapped to steal victims’ data from space. But a team of the lowest surface cocora rarely earns on behalf of the Kremlin is rarely gained the same notification: Hermagedon, or Gamardon.

The infiltrators, who think they are working in the service of the FSB intelligence agency in Russia, do not know their development. However, they collected a plus record of a decade of violations that focus on almost continuous espionage, with grinding with simple and repeated infiltration methods, year after year. Thanks to that huge amount of piracy attempts, it represents through some measures the highest threat to espionage facing Ukraine in the midst of its war with Russia, according to defenders of cybersecurity who are tracking the group.

“It is the group of the most active infiltrators that attack Ukrainian organizations,” said Robert Lipovsky, the Slovakian Cyblessect ESET company.

Lebovsky says ESET may follow Gamardon as it violated the networks of hundreds of victims in Ukraine, and theft of thousands of files on a daily basis. “It is very effective,” says Robert Lipovsky, a harmful program researcher in Ezith. “The size is their great distinction, and this is what makes them dangerous.”

If Gamardon does not behave like other Russian piracy groups, this is partly because some are not Russian citizens – or not, technically, until 2014.

According to the Ukrainian government, there are Gamardon infiltrators in the Crimea Peninsula, the Ukraine Peninsula, which Russia seized after the field of a field in Ukraine. Some of them previously worked on behalf of security services in Ukraine before replacing both sides when the Crimean occupation began in Russia.

“They are the” Crime “officers,” The Crimea “and the” traitors “who defected the enemy,” 2021 Statement from the Ukrainian Intelligence Agency SBUWhich claims that the group carried out more than 5,000 attacks on Ukrainian systems, including critical infrastructure such as “power plants and water and water supply systems”.

Lipovsky says that the initial access techniques of the group are almost entirely of simple spear attacks-where the victims have been subjected to messages with attachments with harmful programs-as well as the harmful code that can affect USB drives and spread from one machine to another. These basic tactics have barely evolved since the group appeared for the first time as a threat aimed at Ukraine in late 2013. However, by moving tirelessly in these simple forms of penetration and targeting in a practical way, every Ukrainian organization has often been proven, and this is often dangerous.

“People sometimes do not realize how much a part will continue” in the phrase. ” This in itself can be a kind of superpower. “

In October 2024, the Ukrainian government went to the point of judging two infiltrators in Gamardon in the absence of not only for penetration crimes but betrayal. A Statement from SBU At that time, the two men – none of them – accused of “betraying the right” by voluntarily joining FSB.

For the former infiltrators of Gamardon, the operation of their former citizens may not lead to the privileges they were hoping. Regardless of the apparent slogan for their unemployed hunting campaigns, phone calls were intercepted between the group members SBU published it They seem to appear to them complaining about their low salaries and lack of recognition. “They should have a medal.” “Decorate again.”