---
title: "Discussion on \"A consolidated analysis of five Russian actor clusters across a fake Notepad++ plugin chain, cloud-service dead drops\" | Hashnode"
description: "Discussion on \"A consolidated analysis of five Russian actor clusters across a fake Notepad++ plugin chain, cloud-service dead drops\". Summary\nSix publications from CERT-UA, ESET, Unit 42, Proofpoint and StrikeReady, spanning 2023 to July 2026, describe five separate Russian actor clusters. Read together, they reveal a shared pattern"
url: "https://hashnode.com/posts/russian-apt-ecosystem-2023-2026-en/6a7440636ff197cb9c69f304"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [A consolidated analysis of five Russian actor clusters across a fake Notepad++ plugin chain, cloud-service dead drops](https://blog.fiscybersec.com/russian-apt-ecosystem-2023-2026-en?utm_source=hashnode&utm_medium=feed)

Summary Six publications from CERT-UA, ESET, Unit 42, Proofpoint and StrikeReady, spanning 2023 to July 2026, describe five separate Russian actor clusters. Read together, they reveal a shared pattern

Aug 6 · 27 min read · blog.fiscybersec.com  
Read the article

-   [#uac-0099](https://hashnode.com/tag/uac-0099)
-   [#gamaredon](https://hashnode.com/tag/gamaredon)
-   [#turla](https://hashnode.com/tag/turla)
-   [#apt28](https://hashnode.com/tag/apt28)
-   [#laundry-bear](https://hashnode.com/tag/laundry-bear)
-   [#matchboil](https://hashnode.com/tag/matchboil)
-   [#spypress](https://hashnode.com/tag/spypress)
-   [#zimreaper](https://hashnode.com/tag/zimreaper)
-   [#zimbra](https://hashnode.com/tag/zimbra)
-   [#webmail-xss](https://hashnode.com/tag/webmail-xss)
-   [#living-off-trusted-software](https://hashnode.com/tag/living-off-trusted-software)
-   [#cert-ua](https://hashnode.com/tag/cert-ua)
-   [#threat-intelligence](https://hashnode.com/tag/threat-intelligence)

## Written by

[Vũ Nhật Lâm](https://hashnode.com/@kami61)

@kami61

  
[View profile](https://hashnode.com/@kami61)

## Responses

Markdown supported · ⌘↵ to post

No responses yet.