A Russian group used the exploit kit to target Ukrainians in 2025.