Ukraine's Computer Emergency Response Team (CERT-UA) said in a report released over the weekend that hacker groups are targeting the country's defense and military companies with phishing attacks.
CERT identified the hacker group as UAC-0185 (also known as UNC4221), but did not say who was behind the group. But earlier this year, a cybersecurity firm linked the group to the Russian government.
Contact Us Do you have more information about the cyber attack on Ukraine? Or was it another attack by Russian government hackers? You can contact Lorenzo Franceschi-Bicchierai securely from your non-work device on Signal (+1 917 257 1382), on Telegram and Keybase @lorenzofb, or by email. You can also contact TechCrunch via SecureDrop.
The hackers were sending emails purporting to be from the Ukrainian Union of Businessmen and Entrepreneurs (ULIE), which describes itself as “Ukraine's largest union of economic organizations and economic entities.” CERT-UA said the email was designed to look like an invitation to an actual conference held in Kiev last week and was sent in advance of the conference.
According to CERT-UA, the hackers are targeting Ukrainian defense contractors and employees of the Armed Forces.
Cybersecurity publication The Record has more information about this hacking campaign and group.