Russian hackers, likely the FSB-affiliated Gamaredon group, are targeting Ukrainian entities with Remcos RAT malware through sophisticated phishing campaigns. The attack uses Russian-language file names about troop movements as bait, with malware connecting to servers in Russia and Germany...
Russian hacking group Star Blizzard has launched a new spear-phishing campaign targeting WhatsApp accounts of government officials, defense experts, and Ukraine-supporting organizations. The group uses sophisticated QR code deception and fake websites to gain unauthorized access to victims...
Russian hackers linked to GRU are targeting Ukrainian military personnel with a malicious version of the Army+ app, using Cloudflare Workers to distribute malware. The attack, discovered by CERT-UA, deploys PowerShell scripts that enable unauthorized remote access through OpenSSH installat...
Russian state-sponsored hacking group Secret Blizzard (Turla) targets Ukrainian military systems using hijacked Amadey malware infrastructure to deploy the Kazuar backdoor. The multi-stage attack campaign, observed between March-April 2024, involves sophisticated techniques including DLL s...
Russian state-linked hackers conduct sophisticated phishing attacks against Ukrainian defense sector, using fake conference invites to deploy malware for stealing credentials and accessing military systems. The campaign, attributed to UAC-0185/UNC4221, targets battlefield intelligence and ...
