Russia didn’t just ratchet up its aggression toward Ukraine on the high seas last week, it also stepped cyberattacks against the country and other governments and private entities around the world.

Familiar threat actors Fancy Bear – using a packed Zebrocy variant and Cannon payload – and Cozy Bear – delivering a Cobalt Strike Beacon backdoor payload – increased their activity, Stealthcare said, but so did Gamaredon, another threat actor tied to Russia.

“The cyberattacks are in keeping with Russia’s effort to extend Soviet-style hegemony worldwide—far beyond regional sea skirmishes with Ukraine,” said Jeremy Samide CEO of Stealthcare, whose Zero Day Live Threat Intelligence platform detected the attacks.

Read the full story…