CVE Tools
Track your stack

Gamaredon in 2025: Leveraging tunnels, workers, dead drops, and new alliances

ESET WeLiveSecurityBy Zoltán Rusnák

ResearchGamaredon
Read at ESET WeLiveSecurity

ESET WeLiveSecurity publishes this story on its own site; we link to it rather than reprint it.

  1. Kaspersky SecurelistExploits and vulnerabilities in Q2 2026CVE-2025-8088
  2. BleepingComputerUpdate now: 7-Zip fixes RCE flaw exploitable with malicious archivesCVE-2025-8088
  3. The Hacker NewsGamaredon Expands Ukraine Attacks with New Malware and Cloud Service AbuseCVE-2025-8088
  4. SecurityWeekRussian APT Deploys ‘StockStay’ Backdoor Against Ukrainian TargetsCVE-2025-8088
  5. The Hacker NewsGoogle Details Turla's New STOCKSTAY Backdoor Used in Ukraine Espionage AttacksCVE-2025-8088
  6. Check Point Research15th June – Threat Intelligence ReportCVE-2025-8088
  7. Daily CyberSecurity (securityonline.info)Old WinRAR Flaw Still Fuels Attacks on Ukraine in 2026CVE-2025-8088
  8. Dark ReadingRussian Attackers Weaponize WinRAR Flaw Against Ukrainian OrgsCVE-2025-8088
  9. The Hacker NewsWinRAR Flaw Exploited by Russia-Aligned Groups to Deploy Stealers in UkraineCVE-2025-8088
  10. The Hacker NewsGamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against UkraineCVE-2025-8088

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store