Cybersecurity coverage with reported impact in Ukraine. Countries identify affected people, organizations or infrastructure; attacker origins and vendor headquarters are separate.
Threat intelBrief2 min read
Researchers say the group planted malicious code on legitimate sites and a Ukrainian analytics service, then used known vulnerabilities to pull data from vulnerable phones.
Threat intelExploitedCVE-2025-8088CVSS 8.42 min read
The Russia-aligned group has been active since at least February 2025, stealing documents and credentials from law enforcement, local councils and a transport hub for foreign military aid.
