The State Special Communications Service gave more details about this. It is stated that e-mails containing links to “documents” were used in the attack.

What is known about the hacker attack

Yes, the computer emergency response team of the Ukrainian government CERT-UA, working under State Special Communications, discovered this. According to that, Between December 15th and 25th, the APT28 group sent emails referring to “documents”. As soon as visitors opened them, their computers were infected with malware.

According to the information obtained, they attacked not only users in Ukraine, but also organizations in Poland.

They write that there is relevant activity in CERT-UA Associated with the activities of the APT28 group. This is evidenced by the analysis of the totality of tactics, techniques, procedures and tools.

The malicious plan also includes taking measures to develop a cyber attack on the entire information and communication system of the institution. Therefore, the hijacking of any computer can pose a threat to the entire network,
– notes of the State Special Communications Service.

Experts emphasize once again that the security of the entire organization depends on each employee. Therefore it is important Don’t forget cyber hygiene. You should use reliable passwords and multi-factor authentication, as well as not follow suspicious links and use hacked programs or software from Russia.

What is known about the attacks of the ART28 group

At the same time Known as Pawn Storm, Fancy Bear, BlueDelta. Some researchers associate him with Russian special services. And this group often directs its efforts against our government:

• yes, in September 2023, CERT-UA detected a cyber attack by ART28; was aimed at one of the objects of critical energy infrastructure in our state;
• but in July 2023, CERT-UA discovered another cyber attack in which this group aimed to steal the data of Ukrainians in order to access postal services;
• Even in June it was possible to detect an espionage campaign against Ukrainian organizations; This was done thanks to a collaboration with Recorded Future;
• also in April 2023, cybercriminals tried to attack Ukrainian government bodies; They wanted to do this with the help of fake “operating system updates”.