Special Communications and Information Protection Service warns about new dangerous newsletter dubbed ‘humanitarian situation in Ukraine’
The Ukrainian Government Computer Emergency Response Team CERT-UA, operating under the State Service for Special Communications and Information Protection of Ukraine, reported the distribution of dangerous emails with the subject "Joint Official report on the humanitarian situation. Ukraine".
"The letters come from compromised e-mail addresses of state structures of Ukraine and contain attachments titled ‘Humanitarian catastrophe of Ukraine since February 24, 2022’ in the form of an XLS document," the press service of the State Service for Special Communications and Information Protection of Ukraine reported on Monday.
"The document contains a macro, the activation of which will trigger the file ‘baseupd.exe’, its execution will lead to the defeat of the computer by the Cobalt Strike Beacon malware," experts warned.
Activity is tracked by the identifier UAC-0056. The State Communications Service noted that these attackers already carried out a cyberattack last week.
Advertising
Advertising
MORE ABOUT
Govt appoints Myronenko as head of State Special Communications Service
19:03, 01.12.2023
Court rules to seize $1.5 mln in cryptocurrency found during search at ex-head of Special Communications Service
19:52, 30.11.2023
Anti-corruption authorities notify leadership of State Special Communications Service of suspicion of misappropriation of state funds
14:31, 20.11.2023
Cabinet dismisses Schyhol from post of head of State Special Communications Service
13:56, 20.11.2023
Russian troops step up attempts to seize Zaporizhia NPP - National Police
19:24, 03.03.2022
LATEST
Yermak, Szijjártó discuss key issues of Ukrainian-Hungarian relations
20:24, 03.05.2024
Currently five multi-role Russian fighters, Su-34, Su-35 aircraft are in Black and Azov Seas
19:53, 03.05.2024
Khortytsia group: In Krasnohorivka, some enemy groups managed to enter hide among remains of refractory plant; all measures being taken to drive enemy out of village
19:26, 03.05.2024
Borrell on behalf of EU due to cyberattacks by Russian-sponsored group ART28: We not to tolerate it, will use full range of responses
18:40, 03.05.2024
Enemy uses chemical munitions 444 times over past month – AFU General Staff