The State Special Communications Service reported a new type of hacker attack on Ukrainian operators and providers. Hackers have started sending emails with the topic "Free primary legal aid".
This was reported by the press service of the department.
The letters come from an email address in the gov.ua domain, which is probably compromised. They have a password-protected attachment "Algorithm of actions of members of the family of a missing serviceman LegalAid.rar". This RAR archive contains the document "Algorithm_LegalAid.xlsm". If you open it, the DarkCrystal RAT malware will download and run.
The government Computer Emergency Response Team CERT-UA believes that the same hackers attacked Ukraineʼs media organizations in June.
- On June 24, Microsoft released a report on the activity of Russian hackers since the beginning of the war in Ukraine. According to him, Russia is using large-scale cyber attacks to support the invasion, many of which have failed.