Russia's APT28 targets Ukraine government with bogus Windows updates
The Kremlin-backed threat group APT28 is flooding Ukrainian government agencies with email messages about bogus Windows updates in the hope of dropping malware that will exfiltrate system data.
"E-mail addresses of senders created on the public service '@outlook.com' can be formed using the employee's real surname and initials," CERT-UA wrote in a brief online note. Executing the command simulates a Windows update but actually downloads and executes a PowerShell script that collects basic system information about using such commands as"tasklist" and"systeminfo". The information is then sent via a HTTP request to Mocky – a service that mocks APIs to help developers test apps.
The notorious APT28 group has been around since 2008. The US Cybersecurity and Infrastructure Security Agency , and security vendors such as Secureworks and Google-owned Mandiant link it to Russia's GRU intelligence agency.
Belgique Dernières Nouvelles, Belgique Actualités
Similar News:Vous pouvez également lire des articles d'actualité similaires à celui-ci que nous avons collectés auprès d'autres sources d'information.
This concept imagines Windows 12 with a taskbar to please everyone and moreThis Windows 12 mockup has me 😍, but will Microsoft make me 😭 instead?
Lire la suite »
'Cynical' rail union should cancel strike over Eurovision to stand with Ukraine, minister saysThe Transport Secretary has criticised a rail union's decision to hold a strike on the day of the Eurovision final and urged them to show solidarity with Ukraine 'It's not our song contest, we're hosting it, but we're hosting it for Ukraine'
Lire la suite »
War-crimes prosecutions in Ukraine are a long gameUkraine is making an effort to prosecute war crimes, but lacks a strategy for building cases against senior Russian leaders
Lire la suite »
Eurovision rail strike workers should show solidarity with Ukraine colleagues, says transport secretaryA union leader at the centre of the long-running industrial dispute dismisses the cabinet minister's comments as 'bizarre' and highlights his group's support for the stricken country, following its invasion by Russia.
Lire la suite »
Man braves wolves and sleeps in WWI bunker on UK to Ukraine cycleEthan travelled by bike to the Polish/Ukrainian border in just 22 days to generate funds for the British Red Cross.
Lire la suite »
Ukraine war: Russia launches second pre-dawn missile attack in three daysOne person dies and dozens more are injured in Russia's second pre-dawn attack in three days.
Lire la suite »