The government’s Computer Emergency Response Team, CERT-UA, operating under the auspices of the State Special Communications Service, warns of a new cyberattack on critical infrastructure in Ukraine.

Experts learned about the distribution of e-mails with the title “Notification of non-payment of tax” on behalf of the “State Tax Office of Ukraine”. They contain the archive “Implementation of Penalties”. zip” with the docx document of the same name. Its discovery will eventually lead to the download of the malicious program Cobalt Strike Beacon. Activity is monitored by UAC-0098. .

Another cyberattack was carried out by distributing a malicious document called “Nuclear Terrorism Is A Very Real Threat.rtf”, the discovery of which led to the download and launch of the malicious program CredoMap. This activity is associated with the activities of the APT28 group.