Gamaredon

Gamaredon, also known as Primitive Bear, UNC530, ACTINIUM, or Aqua Blizzard (by Microsoft) is a Russian advanced persistent threat that has been active since at least 2013.