Russia's APT28 targets Ukraine government with bogus Windows updates
The Kremlin-backed threat group APT28 is flooding Ukrainian government agencies with email messages about bogus Windows updates in the hope of dropping malware that will exfiltrate system data.
"E-mail addresses of senders created on the public service '@outlook.com' can be formed using the employee's real surname and initials," CERT-UA wrote in a brief online note. Executing the command simulates a Windows update but actually downloads and executes a PowerShell script that collects basic system information about using such commands as"tasklist" and"systeminfo". The information is then sent via a HTTP request to Mocky – a service that mocks APIs to help developers test apps.
The notorious APT28 group has been around since 2008. The US Cybersecurity and Infrastructure Security Agency , and security vendors such as Secureworks and Google-owned Mandiant link it to Russia's GRU intelligence agency.
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
This concept imagines Windows 12 with a taskbar to please everyone and moreThis Windows 12 mockup has me 😍, but will Microsoft make me 😭 instead?
Read more »
'Cynical' rail union should cancel strike over Eurovision to stand with Ukraine, minister saysThe Transport Secretary has criticised a rail union's decision to hold a strike on the day of the Eurovision final and urged them to show solidarity with Ukraine 'It's not our song contest, we're hosting it, but we're hosting it for Ukraine'
Read more »
War-crimes prosecutions in Ukraine are a long gameUkraine is making an effort to prosecute war crimes, but lacks a strategy for building cases against senior Russian leaders
Read more »
Eurovision rail strike workers should show solidarity with Ukraine colleagues, says transport secretaryA union leader at the centre of the long-running industrial dispute dismisses the cabinet minister's comments as 'bizarre' and highlights his group's support for the stricken country, following its invasion by Russia.
Read more »
Man braves wolves and sleeps in WWI bunker on UK to Ukraine cycleEthan travelled by bike to the Polish/Ukrainian border in just 22 days to generate funds for the British Red Cross.
Read more »
Ukraine war: Russia launches second pre-dawn missile attack in three daysOne person dies and dozens more are injured in Russia's second pre-dawn attack in three days.
Read more »