Ukraine CERT: Mass Phishing Campaign Poses as Nation's Security Service
More than 100 Ukrainian government devices have been affected by the threat that is being tracked as UAC-0198.
![Four fish hooks in water Four fish hooks in water](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/blt483f011036db21f8/66ba488df9b09cfb14f2b975/fishhook1800_Feng_Yu_alamy.jpg?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
On Aug. 12, Ukraine's Computer Emergency Response Team (CERT-UA) discovered a mass distribution of emails carrying malicious software posing as the country's Security Service (SSU).
The emails contain a link to download a file called "Document.zip" that, once clicked on, triggers a download of the MSI-file. This file launches a malware called ANONVNC that, when opened, allows attackers to gain unauthorized access to a victim's device.
CERT-UA has identified more than 100 affected devices within central and local government bodies and urges everyone to be cautious and attentive. It recommends that users contact CERT-UA if suspicious of any activity.
The activity is tracked as UAC-0198, and CERT-UA is taking measure to mitigate the threat.
About the Author
You May Also Like
State of AI in Cybersecurity: Beyond the Hype
October 30, 2024[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024