Gamaredon, a Russian threat actor group, targeted Ukrainian government authorities. The group used spear-phishing emails to gain initial access and deployed surveillance malware on affected systems.