A Russia-aligned cyberespionage group has targeted Ukrainian justice, law enforcement, local government and defense organizations since at least February 2025, using a custom infostealer to harvest credentials, VPN configurations and documents. Damien Schaeffer of ESET detailed the group, which the firm named Gorbag, in research published on November 3, after presenting it at Virus Bulletin in October. ESET found targets only in Ukraine, many of them near the Russian border. About a quarter were justice and law enforcement bodies and another quarter local administrations, mostly city councils near the front line. The rest included defense entities and an organization publicly documented as a major transport hub for foreign military aid. ESET said the choices closely align with Russia's…