research into adversary infrastructure and malware, as well as community collaboration, in order to detect and defend against nationstate cyberthreats. While we have mapped out three large clusters of currently active Gamaredon infrastructure, we believe there is more