Matryoshka #3/3: Gamaredon's Gammasteel Infostealer

Reported 04 Jun 2026 by otx · Severity: medium

This analysis examines Gamaredon's (UAC-0010, Armagedon) advanced espionage operations targeting Ukrainian government, military, and critical infrastructure. The FSB-operated group deploys GammaSteel, a sophisticated stealer operating almost entirely from memory using Windows DPA