THREAT OPS › Threat News › LABScon25 Replay | Gamaredon x Turla: Unveiling a 2025 Espionage Alliance Targeting Ukraine
LABScon25 Replay | Gamaredon x Turla: Unveiling a 2025 Espionage Alliance Targeting Ukraine
<p>In this LABScon 25 presentation, ESET researchers Matthieu Faou and Zoltán Rusnák present the first technical evidence that Gamaredon actively facilitated Turla’s access to high-value Ukrainian targets in Ukraine.</p> <p>Across incidents observed between February and June 2025, Gamaredon tooling, including PteroGraphin and PteroOdd, was used to deploy Turla’s Kazuar backdoor and, in at least on
Attributed threat actors
- TurlaG0010
Indicators of compromise
- https://www.cvent.com/c/abstracts/0f2ae039-4175-42c2-a534-7f25ada9e539url
- https://www.labscon.io/url