Russia-linked Gorbag targets Ukrainian orgs with info-stealers
The group’s main targets include law enforcement agencies, justice institutions, local administrations near the front line, and organizations in the defense sector.
4 min read
Cybersecurity Help is a global vulnerability intelligence provider. We monitor vulnerabilities in software from 60,000+ vendors and help customers prevent potential data breaches by addressing them proactively.
Request DemoThe group’s main targets include law enforcement agencies, justice institutions, local administrations near the front line, and organizations in the defense sector.
4 min readCVE-2026-111357 and CVE-2026-118527 were exploited alongside a previously patched CVE-2026-104935 in attacks targeting a limited number of customers.
3 min readThe implant may be capable of capturing sensitive info displayed on the screen, including wallet recovery phrases, and sending it to attackers.
3 min readThe attack employed a multi-stage malware delivery chain designed to bypass basic security controls.
3 min readIn nine confirmed cases of post-compromise activity, the attackers deployed the BLOODALCHEMY backdoor.
3 min read