Water Gamayun is a suspected Russian advanced persistent threat (APT) group that emerged in late 2023, primarily motivated by strategic intelligence gathering, credential theft, data exfiltration, and financial gain. This actor distinguishes itself through sophisticated multi-stage attacks that frequently leverage social engineering tactics and zero-day vulnerabilities, such as the MSC EvilTwin flaw (CVE-2025-26633), to compromise systems and maintain long-term persistence. The group is also known by its aliases EncryptHub and Larva-208, and has notably employed Telegram for command and control communications.

Actores similares

blackwaterransomware · 11clearwateractor · 1MuddyWaterapt · 1muddywateractor · 1Water Labbuapt · 0Water Saciapt · 0Water Barghestapt · 0Water Kuritaapt · 0SHADOW-WATER-063apt · 0Water Curupiraapt · 0