Who is Gamaredon Group?

Gamaredon Group is a threat actor attributed to RU, also known as G0047, Shuckworm, DEV-0157. This group is tracked in the Strobes VI threat intelligence database.

What vulnerabilities does Gamaredon Group exploit?

Specific CVE exploitation data for Gamaredon Group is being tracked. Check the Strobes VI threat actor profile for updates.

Gamaredon Group

Also known as: G0047, Shuckworm, DEV-0157, UAC-0010, Trident Ursa, BlueAlpha, Actinium, ACTINIUM, Winterflounder, PRIMITIVE BEAR, IRON TILDEN, Aqua Blizzard, Blue Otso

Exploited CVEs

Overview

Unit 42 threat researchers have recently observed a threat group distributing new, custom developed malware. We have labelled this threat group the Gamaredon Group and our research shows that the Gamaredon Group has been active since at least 2013. In the past, the Gamaredon Group has relied heavily on off-the-shelf tools. Our new research shows the Gamaredon Group have made a shift to custom-developed malware. We believe this shift indicates the Gamaredon Group have improved their technical capabilities.

Exploited Vulnerabilities

No exploited CVEs have been attributed to this threat actor yet.

Browse CVE Database

Quick Actions