According to Ukrinform, the State Special Communications Service reports on this in Telegram.

The government’s computer emergency response team, CERT-UA, operating under the auspices of the State Special Communications Service, warns of cases of dangerous email distribution on “Free primary legal aid”.

“Given the e-mail addresses of the e-mail recipients, experts suggest that the attack targeted Ukrainian telecommunications operators and providers,” the statement said.

The agency states that the letters came from a (possibly compromised) email address on gov.ua, had the suffix “Algorithm of the actions of family members of the missing soldier LegalAid.rar” and was password protected. The specified RAR archive contains the document “Algorithm_LegalAid.xlsm”, which will eventually download and launch the malicious DarkCrystal RAT program. Activity is monitored by UAC-0113.

In June, it was reported that the same attackers carried out a cyber-attack on Ukrainian media outlets.

The State Special Communications and Information Protection Service reportedly warned of new cyber-attacks by sending dangerous files – attackers use the issues of taxation and fines for nuclear terrorism. In early June, experts from the State Special Communications Service discovered a cyberattack against government agencies, in which dangerous emails were sent containing the file “charges.docx with changes in fees”.