According to the State Cyber ​​Defense Center, Ukrainians continue to be attacked online. This time they send a document called “Mobilization Record”. He’s infected with a virus.

Yes, the government’s CERT-UA response team has detected another threat. XLS documents with the name are widely distributed among Ukrainians “Mobilization Register.xls”. Under the plate, as you already understood, the virus is hidden.

A virus hidden in the document was found / Photo CERT-UA

What will happen if you open the file?

1. If you open this infected document and enable the command, the command will download the encrypted file.
2. The EXE file will install the GzipLoader malware on your computer.
3. It will download and install the IcedID program (also known as BankBot).

This program It belongs to the class of “banking Trojans”. One of its features is data stealing for authentication.

We recommend that you be wary of incoming e-mails. The same goes for files. Do not download unknown documents from dubious sources or emails. This will protect your personal data from attackers.

Noteworthy – new massive losses of the enemy as of April 14: watch the video