ESET Reveals Russia-Aligned Gorbag APT Group

ESET researchers identified Gorbag, a Russia-aligned threat actor active since February 2025, targeting Ukrainian law enforcement and defense sectors. The group uses tools like BeautyStealer and Prime ReverseShell to harvest intelligence via spearphishing emails and WinRAR exploits, presenting findings at the Virus Bulletin conference on October 14th, 2026.