Symantec reported a Russian cyber-espionage attack on a military mission in Ukraine starting in February 2025. The attack began with an infected removable drive containing the GammaSteel malware. Built by Russian state-sponsored actor Gamaredon, GammaSteel exfiltrates documents and screenshots, gathers information on antivirus tools and running processes. It remains ongoing via a Windows registry entry. The aggressor, the target, and the information stolen remain undisclosed.

If you have these apps on your smartphone, delete them right away, they contain malware.
Cybersecurity researchers have identified a sophisticated spyware called KoSpy that hides within popular Android applications. Capable of hiding in utility applications, the malware tracks location,