Russia-Ukraine Conflict: Cyber Updates on APT Activity

Russia-Ukraine Conflict: Cyber Updates on APT Activity

TLP: AMBER

In this briefing, ZeroFox Intelligence provides a cybersecurity update on the Russian-Ukraine conflict.

Standing Intelligence Requirements

For the most up-to-date list of ZeroFox Threat Research’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/alpha_team/advisories/14956

Link to Download

• https://zf-dashboard-media.s3.amazonaws.com/intel/ZeroFox+Intelligence+Brief+-+Russia-Ukraine+Conflict+IOC+Updates.pdf

Executive Summary

The Gamaredon Group is one of the most active, existing advanced persistent threats (APT) targeting Ukraine and has been pursuing access to organizations in Ukraine or entities related to Ukrainian affairs since at least 2014. Given its pro-Russian activities, ZeroFox anticipates additional malicious cyber activities against targets in Ukraine and the West, as geopolitical tensions continue to be unresolved. Since February 1, 2022, ZeroFox has observed over 470 Indicators of Compromise (IOCs) associated with the group’s infrastructure. This is an extremely aggressive APT group with little or no reduction in its activity.