Russian state-linked threat actors UTA0352 and UTA0355 are targeting Ukraine-affiliated organizations through sophisticated OAuth attacks since March 2025. The attackers impersonate European officials or use compromised Ukrainian government accounts to establish communication via messaging...
This investigation reveals nearly 200 command-and-control domains linked to Raspberry Robin, a sophisticated malware serving as an initial access broker for Russian-connected criminal groups. Active since 2019, it delivers various payloads including LockBit and Dridex through compromised Q...
CERT-UA alerts about cybercriminals impersonating the agency through fake AnyDesk connection requests, claiming to conduct security audits. With over 1,042 cyber incidents in Ukraine during 2024, major threat actors like UAC-0010 and pro-Russian groups continue targeting organizations thro...
