Covered by 3 outlets — first reported by ESET WeLiveSecurity, Nov 3, 09:50 UTC
Gorbag: Orcs at the border harvesting intelligence from Ukraine
MentionsESET
Summary
Security firm ESET says a Russia-aligned group it calls Gorbag has been using simple information-stealing malware to collect data from Ukrainian organizations. ESET says the group has been active since at least February 2025 and targets only Ukraine, with a preference for law enforcement and justice bodies, local administrations near the front line, and the defense sector. The Hacker News reports the attacks involve a WinRAR flaw to deliver the malware.
AI summary by the SecurityTabs newsroom, checked against ESET WeLiveSecurity, The Hacker News, Infosecurity Magazine. Read the outlets below for the full story.
Continue reading
3 outlets, in the order they reported it.
ESET WeLiveSecurityFirst report
Gorbag: Orcs at the border harvesting intelligence from Ukraine
ESET researchers uncover Gorbag, a Russia-aligned group using simple infostealers to harvest data from Ukrainian organizations near the front line
The Hacker News
Russia-Aligned Gorbag Hackers Exploit WinRAR Flaw to Deploy Data-Stealing Malware
A Russia-aligned threat actor known as Gorbag has been observed using simple information stealer malware in attacks targeting Ukrainian organizations.
Infosecurity Magazine
Russia-Aligned Gorbag Targets Ukraine for Intelligence
Russia-aligned Gorbag has hit Ukrainian justice, local government and defense bodies since 2025
Explained
The technology and terms in this story. Learn more