threatintel
actor tracker
IOC pivot
ioc · sha-256

714aeb3d778bbd03d0c9eaa827ae8c91199ef07d916405b7f4acd470f9a2a437

RU · RussiaGamaredonconfidence · high

GammaSteel PowerShell infostealer component recovered from the February–March 2025 Shuckworm intrusion into a foreign military mission in Ukraine, documented by Symantec's Threat Hunter Team.

family
GammaSteel
first seen
Apr 9, 2025
publisher
Symantec (Broadcom)
source citation