Russia-linked cyber spies target Ukraine’s war crimes investigations and military aid routes

A previously unidentified Russia-linked hacking group, Gorbag, has targeted Ukrainian government agencies, defense organizations and infrastructure used to transport foreign military aid since at least February 2025. The group rapidly steals information using mainly phishing emails, malicious attachments and information-stealing tools.