🔥 Learn about The best group of Russian infiltrators while Gamardon & Tur in Ukraine targets –

— everything you need to know

In this post:

Publishing views: 1

The best group of Russian infiltrators, while Gamardon & Turla is targeting Ukraine

“The Russian infiltrators are now giving them everything to penetrate Ukraine’s systems to weaken their security.”

An unfamiliar mix of two prolonged spy activities

Ukraine has worked as a test site for Russian cyber operations for more than ten years. According to new information, Gamardon and Turla, one of the most infiltrators in Moscow, does not cooperate directly but also works in parallel with the violation of Ukrainian systems.

This week, ESET for Slovak Cyblersecurity ESET posted a study that described how Turla’s Kazuar Backdooor was installed on many Ukrainian end points in early this year using the internal software tools in Gamardon.

This discovery indicates a major change in Russia’s cyber strategy: the apparent rapprochement of organizations that have a history in conducting separate activities, but sometimes relevant. Since 2013, Gamardon, also known as Armageddon, has been active, and often targeted Ukrainian government networks with its uncompromising brutal attacks.

On the other hand, the most advanced spy group has a history of storming diplomatic contractors and Western defense dating back to the late 1990s. Federal security service, or FSB, in Russia is linked to both organizations.

From Kazwar to Perugin: A series of coordinated attacks

The ESET se to sequence in February 2025 when Pterographin was opened at Gamardon Powershell from Turla. According to the investigators, the tool was used to restart the Kazuar V3 after uninstalling or insufficient installation.

The pattern was repeated in April and June. Pteroodd and Pteropaste, two other families for harmful programs, were found to install previous Kazwar versions on other Ukrainian computers.

Each link in the series showed a division of employment: TURLA included a more advanced monitoring cultivation, while Gamardon got entry points with a portable download.

Kazwar first discovered in 2016. Backdooor, the document to the network, can communicate with the attackers through a variety of channels, including web sockets, web exchange services, Exfiltrate system data, and creating stability.

According to ESET, the latest version contains a third of a more symbol than the previous code, indicating continuous development.

Concentration in the face of the ongoing conflict

After Russia has been widely invaded to Ukraine in 2022, which sparked military attacks and electronic attacks, cooperation has been accelerated. Turla seems to use this fateful to plant the most strategic spyware, while Gamardon Mombards Ukrainian goals with spear fishing and USB -based spread.

Over the past 18 months, the harmful programs associated with Turla have infiltrated seven computers, four of which were initially able to reach them. Analysts claim that despite the number of limited episodes, they represent a unique tactical rapprochement between the groups that have previously used various goals and tactics.

It is not clear whether this is a dedicated or composed of a greater Russian intelligence plan. However, the repercussions are clear to Ukrainian defenders and their Western allies: Russian electronic forces have become more uniformity, and reduce may have severe consequences.

About the author

Suraj Cole He is a content specialist in technical writing about cybersecurity and information security. He wrote many amazing articles on cybersecurity concepts, with the latest trends in electronic awareness and ethical piracy. Learn more about “him”.

Read more:

The account of the Deputy Prime Minister of Maharashtra was hacked with the presentation of Pakistani and Turkish flags in the profile, which sparked security concerns.

About the author

Learn more at: https://www.news4hackers.com/top-russian-hacker-groups-united-while-gamaredon-turla-targeting-ukraine/

Join the community with

—

**Additional Resources & Tags:**

– Author: daksh kataria
– Published on: 2025-09-22 12:24:00
– Tags: , Cyber Attack,APT collaboration,cyber security news,cyber threat,ESET discovery,FSB-linked,Gamaredon,intrusion,Kazuar backdoor,malware campaign,PteroGraphin,Russia-linked APT,russian hackers,supply-chain intrusion,targeted attacks,Turla
– Related Rules: [rule_{ruleNumber}], [rule_{ruleNumber}_plain]

**Visuals & Media:**

– Featured Image: https://www.news4hackers.com/wp-content/uploads/2025/09/russian-hacker-groups.webp
– Enclosure Link:

**URL & Links:**

– Post URL (slug): the-best-group-of-russian-infiltrators-while-gamardon-tur-in-ukraine-targets
– Encoded URL: https%3A%2F%2Fwww.news4hackers.com%2Ftop-russian-hacker-groups-united-while-gamaredon-turla-targeting-ukraine%2F
– Decoded URL: https://www.news4hackers.com/top-russian-hacker-groups-united-while-gamaredon-turla-targeting-ukraine/
– Redirect URL: https://www.news4hackers.com/top-russian-hacker-groups-united-while-gamaredon-turla-targeting-ukraine/
– Source Domain: www.news4hackers.com

**Meta & Miscellaneous:**

– Publication Time: 1758540649
– Hashtags: #group #Russian #infiltrators #Gamardon #Tur #Ukraine #targets
– Custom Prompt/Note: Prompt

—

**Sample Post Title:** The best group of Russian infiltrators while Gamardon & Tur in Ukraine targets –