ESET RESEARCH UNCOVERS GORBAG , RUSSIA - ALIGNED THREAT GROUP HARVESTING INTELLIGENCE FROM UKRAINE

What happened: ESET Research discovered targeted attacks by Gorbag, a Russia-aligned threat group, against Ukrainian organizations since February 2025, using spearphishing emails with malicious attachments. Key numbers: Attacks staged since February 2025. Why it matters: ESET researcher Damien Schaeffer says the one-time harvesting approach may indicate Gorbag acts as an initial access broker, possibly the first stage of a longer intrusion chain, and its targeting aligns with Russia's wartime intelligence priorities.

ESET Research discovered targeted attacks by Gorbag, a Russia-aligned threat group, against Ukrainian organizations since February 2025, using spearphishing emails with malicious attachments.

ESET researcher Damien Schaeffer says the one-time harvesting approach may indicate Gorbag acts as an initial access broker, possibly the first stage of a longer intrusion chain, and its targeting aligns with Russia's wartime intelligence priorities.