SSCS warns of another cyber attack on government institutions

corinna-goering.de

The State Service for Special Communications and Information Protection of Ukraine reports a new cyber attack on Ukrainian government institutions, conducted through sending emails.

Hackers are sending out new harmful e-mails with the subject "Specialized prosecutor's office in the military and defense field. Information on the vacancies and their staffing."

The emails have an XLS document attached; this document contains a macro which, if activated, will create and open a "write.exe" file on the computer. As a result, the device will be affected by the Cobalt Strike Beacon malware.

The State Intelligence Service believes that the UAC-0056 group, which has already been involved in the cyberattacks on Ukraine in April and March, is responsible for the emails.