Cybersecurity incident — 2022-11-01 00:00:00
Affected organization: Ukrainian government organizations
Affected country: Ukraine
Industry: Public Administration
Event type: Exploitive
Event subtype: Exploitation of End Host
Motive: Political-Espionage
Actor: FSB 18th Center for Information Security (Berserk Bear)
Actor type: Nation-State
Actor country: Russian Federation

In November 2022, BlackBerry uncovered a new Gamaredon campaign that relied on a multi-stage Telegram scheme to first profile potential victims and then deliver the final payload along with the malicious command-and-control (C&C). According to BlackBerry, the targeted victims belong to strategic industries in Ukraine, such as law enforcement and others.