BlueAlpha

A Recorded Future tracking name for a Russian state-linked intrusion cluster that overlaps with Gamaredon and activity attributed to Russia's FSB. It primarily targets Ukrainian government and security organizations through phishing and custom malware such as GammaDrop and GammaLoad.