As reported by Ukrinform, the State Special Communications Service reported this on Telegram.

“Government computer emergency response team of Ukraine CERT-UA, operating under State Special Communications, warns of mass distribution of dangerous emails” Joint official report on the humanitarian situation. Ukraine,” reads the message.

Such letters were found to come from the compromised email addresses of Ukrainian government bodies and contained attachments in the form of an XLS document entitled “Ukraine’s humanitarian disaster since February 24, 2022.xls”.

Said document contains a macro, the activation of which will lead to the launch of baseupd.exe. Running the file will infect your computer with Cobalt Strike Beacon malware.

According to the State Intelligence Service, the event is linked to the activities of the UAC-0056 group, which was linked to the cyber attack that took place last week.

CERT-UA experts take measures to identify the circumstances of the email account hijacking as well as blocking the malware management server.

For added security, using multi-factor authentication for email is highly recommended.

As reported by Ukrinform, dangerous e-mails with the subject “Prosecutor’s Office specialized in the field of military and defense. Information about the availability of vacancies and cadres” came to Ukraine’s state organizations.

Since the beginning of the full-scale war, the Russian Federation has carried out 796 cyberattacks against Ukraine, which is three times more than in the same period last year.