gamaredon - Robuta Search

https://thehackernews.com/2025/04/gamaredon-uses-infected-removable.html?m=1

Gamaredon breached a Western military mission on Feb 26, 2025, using upgraded GammaSteel malware and new obfuscation tactics.

https://cyberscoop.com/tag/gamaredon/