Russian APT InvisiMole, which has ties to Gamaredon, conducted a phishing campaign targeting Ukrainian organizations with the LoadEdge backdoor. The backdoor allowed Gamaredon to install surveillance software and other malware onto infected systems.