The Kremlin-linked hacking group Gamaredon appears to be behind a recent campaign that aims to install a malicious version of the Remcos tool on Ukrainian computers.
First seen on therecord.media
Jump to article: therecord.media/gamaredon-phishing-campaign-fake-ukraine-documents-remcos