Ukraine Warns of New Phishing Campaign Targeting Government Computers

August 13, 2024 at 01:48AM Ukraine’s CERT-UA warns of a new phishing campaign impersonating the Security Service of Ukraine, distributing malware ANONVNC for remote desktop access. Over 100 computers, including government bodies, have been infected. Attack involves mass email distribution of ZIP archive with a malicious MSI installer file. CERT-UA also attributes phishing attacks to … Read more

Military Tank Manual, 2017 Zero-Day Anchor Latest Ukraine Cyberattack

April 26, 2024 at 09:57AM Unknown threat actors targeted Ukrainian government entities using an old Microsoft Office RCE exploit (CVE-2017-8570) to deliver a malicious PowerPoint file via Signal. The attack involved a Russian VPS and Cobalt Strike Beacon for information theft. The campaign’s advanced masquerading and evasive techniques pose challenges for detection and attribution. Enhanced … Read more