UAC-0001 (APT28) Attack Detection: The russia-Backed Actor Uses LLM-Powered LAMEHUG Malware to Target Security and Defense Sector  – Source: socprime.com https://ciso2ciso.com/uac-0001-apt28-attack-detection-the-russia-backed-actor-uses-llm-powered-lamehug-malware-to-target-security-and-defense-sector-source-socprime-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #Latestthreats #socprimecom #Phishing #socprime #CERT-UA #CERTUA #APT28 #Blog

UAC-0001 (APT28) Activity Detection: The russian State-Sponsored Group Targets Government Agencies Using BEARDSHELL and COVENANT Malware – Source: socprime.com https://ciso2ciso.com/uac-0001-apt28-activity-detection-the-russian-state-sponsored-group-targets-government-agencies-using-beardshell-and-covenant-malware-source-socprime-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #Latestthreats #socprimecom #BEARDSHELL #COVENANT #socprime #CERT-UA #CERTUA #APT28 #Blog

Ukrainian Government Systems Targeted With Backdoors Hidden in Cloud APIs and Docs https://thecyberexpress.com/ukrainian-government-systems-targeted/ #UkrainianGovernmentSystems #TheCyberExpressNews #TheCyberExpress #FirewallDaily #CyberWarfare #MalwareNews #CyberNews #Espionage #FancyBear #Phishing #CERTUA #Russia #Signal #APT28 #APT28 #ICS

Ukraine Reports 48% Jump in Cyber Incidents in H2 2024, but 77% Drop in High-Severity Incidents https://thecyberexpress.com/cyber-incidents-in-h2-2024-ukraine/ #Ukrainecyberincident #TheCyberExpressNews #Ukrainecyberwarfare #Ukrainecyberattacks #VulnerabilityNews #malwareplaybook #TheCyberExpress #kineticattacks #FirewallDaily #CyberWarfare #ThreatActors #MalwareNews #CERTUkraine #GeoServer #Features #CERTUA

UAC-0226 Attack Detection: New Cyber-Espionage Campaign Targeting Ukrainian Innovation Hubs and Government Entities with GIFTEDCROOK Stealer – Source: socprime.com https://ciso2ciso.com/uac-0226-attack-detection-new-cyber-espionage-campaign-targeting-ukrainian-innovation-hubs-and-government-entities-with-giftedcrook-stealer-source-socprime-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #Latestthreats #GIFTEDCROOK #socprimecom #Phishing #socprime #CERT-UA #UAC0226 #CERTUA #14303 #Blog

UAC-0219 Attack Detection: A New Cyber-Espionage Campaign Using a PowerShell Stealer WRECKSTEEL – Source: socprime.com https://ciso2ciso.com/uac-0219-attack-detection-a-new-cyber-espionage-campaign-using-a-powershell-stealer-wrecksteel-source-socprime-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #Latestthreats #socprimecom #WRECKSTEEL #Phishing #socprime #CERT-UA #UAC0219 #CERTUA #14283 #Blog

In March, #CERTUA observed cyber-espionage attacks against Ukrainian state bodies and critical infrastructure by #UAC0219 spreading #WRECKSTEEL stealer for data theft. Detect potential intrusions with #Sigma rules from SOC Prime Platform.
https://socprime.com/blog/detect-uac-0219-attacks-against-ukrainian-state-bodies/?utm_source=mastodon&utm_medium=social&utm_campaign=cert-ua&utm_content=blog-post

#CERTUA warns defenders about a targeted cyber-espionage operation by #UAC0200 targeting the Armed Forces of Ukraine. Detect associated malicious activity with #Sigma rules from SOC Prime Platform.
https://socprime.com/blog/detect-uac-0200-attacks-using-darkcrystal-rat/?utm_source=mastodon&utm_medium=social&utm_campaign=cert-ua&utm_content=blog-post

UAC-0200 Attack Detection: Cyber-Espionage Activity Targeting Defense Industry Sector and the Armed Forces of Ukraine Using DarkCrystal RAT – Source: socprime.com https://ciso2ciso.com/uac-0200-attack-detection-cyber-espionage-activity-targeting-defense-industry-sector-and-the-armed-forces-of-ukraine-using-darkcrystal-rat-source-socprime-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #DarkCrystalRAT #DARKCRYSTALRAT #Latestthreats #socprimecom #socprime #CERT-UA #UAC0200 #CERTUA #14045 #Blog

Hackers Exploit RDP Tools to Breach Ukraine’s Notarial Offices, CERT-UA Reports https://thecyberexpress.com/uac-0173-cyberattack/ #StateSpecialCommunicationsService #MinistryofJusticeofUkraine #TheCyberExpressNews #UserAccountControl #TheCyberExpress #DataBreachNews #FirewallDaily #HackerNews #CyberNews #UAC0173 #CERTUA

UAC-0173 Activity Detection: Hackers Launch Phishing Attacks Against Ukrainian Notaries Using the DARKCRYSTALRAT Malware – Source: socprime.com https://ciso2ciso.com/uac-0173-activity-detection-hackers-launch-phishing-attacks-against-ukrainian-notaries-using-the-darkcrystalrat-malware-source-socprime-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #DARKCRYSTALRAT #Latestthreats #socprimecom #Phishing #socprime #CERT-UA #UAC0173 #CERTUA #13738 #Blog

#CERTUA warns defenders of a surge in phishing attacks by #UAC0173 against Ukrainian notaries to gain remote access and modify state registries. Detect increasing malicious activity with #Sigma rules from SOC Prime Platform.
https://socprime.com/blog/detect-uac-0173-attacks-against-ukrainian-notaries/?utm_source=mastodon&utm_medium=social&utm_campaign=cert-ua&utm_content=blog-post

#CERTUA warns defenders of targeted activity to launch cyber-attacks against the critical infrastructure sector in Ukraine and beyond linked to UAC-0212, a subcluster of #Sandworm #APT. Detect intrusions with #Sigma rules from SOC Prime Platform.
https://socprime.com/blog/detecting-uac-0212-attacks-linked-to-sandworm/?utm_source=mastodon&utm_medium=social&utm_campaign=cert-ua&utm_content=blog-post

Good day all! The Computer Emergency Response Team of Ukraine, CERT-UA reports on a targeted attack attributed to #APT28 they observed on critical energy infrastructure facility in Ukraine. It started with a #phishing email that contained a link to an archive that led to a downloaded zip file that contained three decoy JPGs and a bat file that would run on the victims computer. The BAT file would, again, open some decoy web pages, but more importantly would create a .bat and .vbs file. There was some discovery commands issued, TOR program downloaded and hidden on the victim's computer as a hidden service, and abused common ports (445,389,3389,443). Last but not least, a PowerShell script was used to collect the password hash of the account. Enjoy and Happy Hunting!

https://cert.gov.ua/article/5702579