FSB’s matryoshka #3/3 – Gamaredon’s gifts that keeps unpacking – GammaSteel

Gamaredon, a Russian FSB-operated cyberespionage group, has deployed a highly resilient, modular, and nearly fileless malware arsenal—leveraging advanced obfuscation, Windows-native features, and legitimate cloud infrastructure—to stealthily exfiltrate sensitive Ukrainian data while maintaining persistent, covert access and rapid adaptability.