Russia-Linked Group Targets Ukraine with Phishing Attacks Using Trojanized Software

In May 2025, the Russia-linked group InedibleOchotense conducted phishing attacks on Ukrainian targets using trojanized ESET installers. These attacks involved delivering malicious software through emails and Signal messages, which installed both legitimate software and the Kalambur backdoor. The broader context includes increased espionage and cybercrime activities by state-aligned hacking groups over the past six months.