In this talk we will present the Sednit group tools in details. We will also describe some of their recent campaigns, where they employed Ukraine-related topics and a custom exploit-kit to compromise their targets.