---
title: The new threat from Russia is called Gazer
description: Discovered Gazer malware, the Russian backdoor which spies embassies and consulates in Europe.
image: https://newsroom.kireygroup.com/hubfs/Immagini%20blog/Blog_archivio.jpg
---

[kireygroup.com](https://www.kireygroup.com/)

[![](https://newsroom.kireygroup.com/hubfs/item-2020-dicembre/logo-Blog-v2.svg)](https://newsroom.kireygroup.com/en/news)

- [Ita](https://newsroom.kireygroup.com/news/la-nuova-minaccia-dalla-russia-si-chiama-gazer?hsLang=it)
- Eng
- [Esp](https://newsroom.kireygroup.com/es/news?hsLang=en)

[Kireygroup.com](https://www.kireygroup.com/)

# Get your daily dose of tech!

## We Shape Your Knowledge

# [Welfare: from compliance to competitiveness, digital services and technologies are key to pension funds’ future](https://newsroom.kireygroup.com/en/news/welfare-digital-services-and-technologies-are-key-to-pension-funds-future?hsLang=en)

By Michela Sertorio, Business Line Manager - BU Pension Funds atKirey.

[Read more](https://newsroom.kireygroup.com/en/news/welfare-digital-services-and-technologies-are-key-to-pension-funds-future?hsLang=en)

 9 MIN READ

26 October 2026

### Latest News

- [Welfare: from compliance to competitiveness, digital services and technologies are key to pension funds’ future](https://newsroom.kireygroup.com/en/news/welfare-digital-services-and-technologies-are-key-to-pension-funds-future?hsLang=en)
- [Inference Costs: how to prevent AI agents from driving costs up exponentially](https://newsroom.kireygroup.com/en/news/inference-costs-how-to-prevent-ai-agents-from-driving-costs-up-exponentially?hsLang=en)
- [Kirey Advisory at the ABI Lab workshop on Processes, Operations and Organization](https://newsroom.kireygroup.com/en/news/kirey-advisory-at-the-abi-lab-workshop-on-processes-operations-and-organization?hsLang=en)
- [Kirey Strengthens Its SAP Presence: Mind The Value Achieves Reselling Partner Status](https://newsroom.kireygroup.com/en/news/kirey-strengthens-its-sap-presence-mind-the-value-achieves-reselling-partner-status?hsLang=en)
- [The Dark Side of Multicloud: how to prevent workload placement from generating technical debt](https://newsroom.kireygroup.com/en/news/the-dark-side-of-multicloud-how-to-prevent-workload-placement-from-generating-technical-debt?hsLang=en)
- [Shadow AI: 4 out of 5 employees use tools not governed by the company](https://newsroom.kireygroup.com/en/news/shadow-ai-4-out-of-5-employees-use-tools-not-governed-by-the-company?hsLang=en)

 1 MIN READ

5 October 2017

- Share on:
- <https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fnewsroom.kireygroup.com%2Fen%2Fnews%2Fthe-new-threat-from-russia-is-called-gazer>
- <https://www.twitter.com/share?url=https%3A%2F%2Fnewsroom.kireygroup.com%2Fen%2Fnews%2Fthe-new-threat-from-russia-is-called-gazer>
- <http://www.linkedin.com/shareArticle?mini=true&url=https://newsroom.kireygroup.com/en/news/the-new-threat-from-russia-is-called-gazer>

- [Cybersecurity](https://newsroom.kireygroup.com/en/news/tag/cybersecurity) /

# The new threat from Russia is called Gazer

#### Kirey

[![](https://newsroom.kireygroup.com/hubfs/it.svg)](https://newsroom.kireygroup.com/news/la-nuova-minaccia-dalla-russia-si-chiama-gazer?hsLang=it)    [![](https://newsroom.kireygroup.com/hubfs/ES.svg)](https://newsroom.kireygroup.com/?hsLang=es)

 1 MIN READ

5 October 2017

- Share on:
- <https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fnewsroom.kireygroup.com%2Fen%2Fnews%2Fthe-new-threat-from-russia-is-called-gazer>
- <https://www.twitter.com/share?url=https%3A%2F%2Fnewsroom.kireygroup.com%2Fen%2Fnews%2Fthe-new-threat-from-russia-is-called-gazer>
- <http://www.linkedin.com/shareArticle?mini=true&url=https://newsroom.kireygroup.com/en/news/the-new-threat-from-russia-is-called-gazer>

- [All](https://newsroom.kireygroup.com/news?hsLang=en)
- Categories + 
    - [Corporate](https://newsroom.kireygroup.com/en/news/tag/corporate)
    - [Cybersecurity](https://newsroom.kireygroup.com/en/news/tag/cybersecurity)
    - [Cloud](https://newsroom.kireygroup.com/en/news/tag/cloud)
    - [Data Value](https://newsroom.kireygroup.com/en/news/tag/data-value)
    - [Innovation](https://newsroom.kireygroup.com/en/news/tag/innovation)
    - [Artificial Intelligence](https://newsroom.kireygroup.com/en/news/tag/artificial-intelligence)
    - [Software Development](https://newsroom.kireygroup.com/en/news/tag/software-development)
    - [Corporate Social Responsibility](https://newsroom.kireygroup.com/en/news/tag/corporate-social-responsibility)
    - [Advisory](https://newsroom.kireygroup.com/en/news/tag/advisory)
    - [Welfare & Social Services](https://newsroom.kireygroup.com/en/news/tag/welfare-social-services)
- [Press & PR](https://newsroom.kireygroup.com/en/news/tag/press)

## Discovered Gazer malware, the Russian backdoor which spies embassies and consulates in Europe

The researchers at [**ESET**](https://www.eset.com/us/) (the largest software security manufacturer in the European Union), discovered the Russian backdoor called **Gazer** which is able to spy in the shadows, thanks to its advanced methods, remaining active as long as possible in infected devices. Gazer has hit mostly consulates, embassies, ministries and other public institutions in various parts of the world.

To avoid being discovered, the sophisticated malware constantly changes the strings within its code, randomizes the markers and deletes the files safely.

With attacks on embassies and ministries, Gazer embodies the main features of the cyber-espionage campaign attributed to **Turla**, a presumed Russian operation that has targeted military and intelligence organizations in the last eight years, infecting hundreds of computers.

These campaigns use **spear-phishing techniques** to deploy a first-stage backdoor, alongside a second-tier backdoor that captures the information from the infected computer and sends it to the cybercriminal group by connecting to C & C servers.

All organizations, from institutional, diplomatic, supervisory, private companies, are at risk and should employ additional security measures in order to avoid violating their security systems.

![gazer malware](https://newsroom.kireygroup.com/hs-fs/hubfs/Immagini%20blog/gazer-malware.jpg?width=728&name=gazer-malware.jpg)

- [Previous post](https://newsroom.kireygroup.com/en/news/system-evolution-is-among-the-sponsors-of-join-visualize-your-world?hsLang=en)
- [Read all posts](https://newsroom.kireygroup.com/en/news?hsLang=en)
- [Next post](https://newsroom.kireygroup.com/en/news/easy-declarator-new-sap-solution?hsLang=en)

## Related posts:

#### [Shadow AI: 4 out of 5 employees use tools not gove...](https://newsroom.kireygroup.com/en/news/shadow-ai-4-out-of-5-employees-use-tools-not-governed-by-the-company?hsLang=en)

“While 80% of professionals use AI in their work, only 22% rely exclusively on tools provided by the...

[Read more](https://newsroom.kireygroup.com/en/news/shadow-ai-4-out-of-5-employees-use-tools-not-governed-by-the-company?hsLang=en)

 11 MIN READ

5 October 2017

#### [Autonomous SOC: reality, limitations, and prospect...](https://newsroom.kireygroup.com/en/news/autonomous-soc-reality-limitations-and-prospects-for-ai-driven-security?hsLang=en)

Artificial intelligence is certainly not new to the world of cybersecurity. For more than a decade, ...

[Read more](https://newsroom.kireygroup.com/en/news/autonomous-soc-reality-limitations-and-prospects-for-ai-driven-security?hsLang=en)

 11 MIN READ

5 October 2017

#### [Cybersecurity awareness must change form: human de...](https://newsroom.kireygroup.com/en/news/cybersecurity-awareness-must-change-form-human-decision-quality-at-the-center?hsLang=en)

By Roberto Marzocca, Head of Cybersecurity di Kirey For a long time, the cybersecurity sector has ar...

[Read more](https://newsroom.kireygroup.com/en/news/cybersecurity-awareness-must-change-form-human-decision-quality-at-the-center?hsLang=en)

 6 MIN READ

5 October 2017

#### Explore

- [Home](https://www.kireygroup.com/)
- [Competencies](https://www.kireygroup.com/en/competencies)
- [Industries](https://www.kireygroup.com/en/industries)
- [About Us](https://www.kireygroup.com/en/about-us)
- [Tech&Partners](https://www.kireygroup.com/en/tech-partners)
- [Careers](https://www.kireygroup.com/en/careers)
- [Contact](https://www.kireygroup.com/en/contact)
- [Corporate Social Responsibility](https://www.kireygroup.com/en/corporate-social-responsibility)
- [Advisory](https://www.kireyadvisory.com/en)

#### Policy

- [Quality](https://www.kireygroup.com/oven/media/PKG-COMP-AL14-Quality-Policy.pdf)
- [Security](https://www.kireygroup.com/oven/media/PKG-CIS-LG02-Security-Policy.pdf)
- [Gender Equality](https://www.kireygroup.com/oven/media/PKG-COMP-LG03-Politica-per-la-parita-di-Genere-v2.pdf)
- [Service Management](https://www.kireygroup.com/oven/media/PKG-COMP-AL45-Politica-per-la-gestione-dei-servizi.pdf)
- [Environment](https://www.kireygroup.com/oven/media/PKG-COMP-AL44-Politica-Ambientale-Kirey.pdf)
- [Health, Safety & Wellbeing](https://www.kireygroup.com/oven/media/PKG-COMP-LG02-Policy-on-health-safety-and-well-being-in-the-work-environment.pdf)
- [ESG](https://www.kireygroup.com/oven/media/Policy-ESG-ENG-v1.pdf)
- [Info on Data Processing](https://www.kireygroup.com/en/information-on-data-processing)

#### Certifications

- [ISO 9001:2015](https://www.kireygroup.com/oven/media/KIREY-S-R-L-9001.pdf)
- [ISO/IEC 27001:2022](https://www.kireygroup.com/oven/media/KIREY-S-R-L-27001.pdf)
- [PDR 125](https://www.kireygroup.com/oven/media/PDR-125-2022.pdf)  
  <https://www.kireygroup.com/oven/media/PKG-COMP-AL45-Politica-per-la-gestione-dei-servizi.pdf>
- [ISO/IEC 20000-1:2018](https://www.kireygroup.com/oven/media/ISOIEC-20000-12018-ENG.pdf)
- [ISO 14001:2015](https://www.kireygroup.com/oven/media/ISO-14001-2015-ENG.pdf)
- [ISO 45001:2018](https://www.kireygroup.com/oven/media/CERTIFICATO-ISO-45001-KIREY-ENG.pdf)
- [ISO 22301:2019](https://www.kireygroup.com/oven/media/ISO-22301-2019-ENG.pdf)

#### Info

**Kirey Srl**

[info@kireygroup.com](mailto:info@kireygroup.com)  
Viale Francesco Restelli, 5  
20124 Milano

[kirey@pec.it](mailto:kirey@pec.it)  
**PI/CF**: 06729880960  
**REA**: MI 1910802  
**Tel**: +39 02 78625200

Capitale sociale 1.089.620,00 

[![Linkedin](https://newsroom.kireygroup.com/hs-fs/hubfs/Linkedin.png?width=20&name=Linkedin.png)](https://www.linkedin.com/company/kireygroup/)<https://open.spotify.com/show/41V5g7d4zccIrVcmNB3ZWd>   <https://www.instagram.com/kireygroup/?igshid=MzRlODBiNWFlZA%3D%3D>

- [Privacy Policy](https://www.kireygroup.com/oven/media/Kirey-Privacy-ENG-policy-art-13.pdf)
- [Cookie Policy](https://www.kireygroup.com/oven/media/Kirey-Cookie-Policy-ENG-1.pdf)
- [Terms and Conditions](https://www.kireygroup.com/oven/media/Kirey-Website-Terms-and-Conditions-1.pdf)

[![KIREY LOGO](https://newsroom.kireygroup.com/hs-fs/hubfs/KIREY_LOGO_PAYOFF_RGB_POS.png?width=200&height=72&name=KIREY_LOGO_PAYOFF_RGB_POS.png)](https://www.kireygroup.com/)

© Copyright 2026 by Kirey