Given the steps and precision supply included in this marketing campaign, it seems this may have been a unique, deliberate endeavor by Gamaredon to compromise this Western govt firm. We have updated our Indicators of Compromise (IoCs) to involve these additional domains and cluster observations. Monitoring these clusters, we noticed an try to compromise a Western government entity in Ukraine on Jan. 19, 2022.