Two of the Kremlin's most active hack groups are collaborating, ESET says
Turla and Gamaredon collaborated, with Gamaredon providing access and deployment support enabling Turla to restart and deploy Kazuar across targeted Ukrainian systems.
Turla and Gamaredon Working Together in Fresh Ukrainian Intrusions
Russian state-sponsored groups Gamaredon and Turla collaborated, with Gamaredon deploying and restarting Turla's Kazuar implants on select Ukrainian systems between Feb–Apr 2025.