The Computer Emergency Response Team of Ukraine has detected a wave of cyberattacks seeking to compromise Ukrainian users’ Telegram accounts.
The observed malicious campaign involves the distribution of phishing messages warning users that someone attempted to log-in on their device from Russia. The phishing message contains a link to a fake Telegram website designed to trick victims into providing their phone number and a one-time password sent via SMS.
The emergency team tracks this threat cluster as “UAC-0094.”
Recently, CERT-UA has issued two security advisories detailing phishing attacks attributed to the Russia-linked Armageddon (aka Gamaredon, Primitive Bear) APT group. In two separate cases the group launched phishing campaigns against Ukrainian government organizations and entities in the European Union.
Cybersecurity Help statement on the critical situation in Ukraine
On February 24, people in many cities and towns across Ukraine woke up to the sounds of explosions and artillery fire, as the Russian Federation launched a full-scale invasion of the country. Such actions are unacceptable, political ambitions of any man aren’t worth of blood, tears, and destruction of millions of lives. We give our full support to the Ukrainian people in these hard times. No more war! Слава Україні!