Gamaredon Uses CVE-2025-8088 to Deploy GammaDrop and GammaLoad in Ukraine Campaign
The report details Gamaredon’s campaign against Ukrainian state institutions, showing how CVE-2025-8088 weaponized archives install GammaDrop and GammaLoad, which establish persistence, profile hosts and retrieve tailored payloads.