FSB’s matryoshka #2/3 – Gamaredon’s gifts that keeps unpacking – GammaLoad

Reported 03 Jun 2026 by otx · Severity: medium

Gamaredon, an FSB-operated cyberespionage group, continues targeting Ukrainian government, military, and critical infrastructure through sophisticated multi-stage infection chains. This analysis examines GammaLoad, a collection of VBScript loaders that establish continuous access