cognitive cybersecurity intelligence

News and Analysis

Search

Shuckworm Group Leverages GammaSteel Malware in Targeted PowerShell Attacks

Shuckworm Group Leverages GammaSteel Malware in Targeted PowerShell Attacks

The Russian-linked cyber-espionage group Shuckworm is targeting Ukrainian entities with an updated version of its GammaSteel infostealer malware. The group, believed to operate on behalf of Russia’s Federal Security Service, uses removable USB drives for initial access and employs increasingly stealthy and sophisticated methods, including using PowerShell. The malware is capable of gathering system information and exfiltrating specific files, leveraging tactics aimed at evasion and obfuscation. Researchers note Shuckworm’s persistently evolving methods pose a significant cyber threat, particularly to entities linked to Ukraine.

Source: gbhackers.com –

Subscribe to newsletter

Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.

More Posts