APT Explorer

All actors

Water Gamayun

Linked to Russia by two sources.

Reports
2
Last reported
Known CVEs
1
Origin
Russia
ID
water-gamayun
Sources
MISPMalpedia
Merge evidence
1 alias match

Reports per quarter

Dated reports, 2025 Q1 to 2026 Q2.

CVEs named in reports

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. Rhadamanthys (Malware Family)

    date ORKL added it ORKL

    The title opens a link whose publisher is not confirmed. Archived copy on ORKL Details

  2. A Deep Dive into Water Gamayun's Arsenal and Infrastructure

    Malpedia library date ORKL

    Archived copy on ORKL Details

Newest first. Details opens the report in Explore.