Gorbag

Gorbag APT uses WinRAR flaw to steal credentials from Ukrainian gov

1. Executive summary ESET is tracking a Russia-aligned group it calls Gorbag, which has broken into Ukrainian organisations since at least February 2025 using spearphishing