A consolidated analysis of five Russian actor clusters across a fake Notepad++ plugin chain, cloud-service dead drops
Summary Six publications from CERT-UA, ESET, Unit 42, Proofpoint and StrikeReady, spanning 2023 to July 2026, describe five separate Russian actor clusters. Read together, they reveal a shared pattern









