Skip to content
Edit post

Hackers impersonated Ukrainian agencies in emails to Polish officials

by Abbey Fenbert December 9, 2023 4:21 AM 1 min read
In this photo illustration, the 502 Bad Gateway message appears on the Defense Ministry's website with the Ukrainian flag in the background. (Pavlo Gonchar/SOPA Images/LightRocket via Getty Images)
This audio is created with AI assistance

The hacker group UAC-0050 sent emails claiming to be from Ukrainian government agencies to Polish state authorities, the State Special Communications Service reported on Dec. 8.

Government employees in Poland and Ukraine received emails with subject lines related to "debts" and "legal claims," according to an investigation carried out by the Computer Emergency Response Team of Ukraine (CERT-UA). The emails also contained attachments in the form of password-protected RAR files.

When opened, these files could infect users' computers with RemcosRAT or MeduzaStealer malware.

The emails came from legitimate government accounts that had been compromised, according to CERT-UA. Many of them came from the gov.ua domain.

CERT-UA is reportedly taking measures to localize and counteract the cyber threat.

The UAC-0050 hacker group has previously sent emails impersonating the Security Service of Ukraine (SBU), the Pechersk Court, and Ukrtelecom.

The State Special Communications Service came under new leadership on Dec. 1. Yurii Myronenko was named the new agency head after its previous chief Yurii Shchyhol was dismissed amid charges of embezzlement.

Ukraine war latest: Scammers reportedly cheat volunteers out of millions on drone purchases
Key developments on Dec. 8: * Investigation reveals scheme to steal money from volunteers on drone purchases * Germany hands over shells, drones, other equipment in latest delivery to Ukraine * Ambassador: Russia holds 500 Ukrainian medical workers captive * Russian strike on Dnipropetrovsk Obl…

News Feed

10:47 AM  (Updated: )

Ukraine hits 2 oil depots in Russia overnight.

Ukrainian forces attacked oil depots in Russia's Tula and Kaluga oblasts overnight on Jan. 18, according to the General Staff and a Kyiv Independent's source in Ukraine's military intelligence (HUR).
6:20 AM  (Updated: )

3 killed, 3 injured following Russia's attack on Kyiv.

Russia launched an attack on Kyiv early in the morning on Jan. 18, killing three people and injuring three others, Kyiv city military administration head Tymur Tkachenko reported.
MORE NEWS

Editors' Picks

Enter your email to subscribe
Please, enter correct email address
Subscribe
* indicates required
* indicates required
Subscribe
* indicates required
* indicates required
Subscribe
* indicates required
Subscribe
* indicates required
Subscribe
* indicates required

Subscribe

* indicates required
Subscribe
* indicates required
Subscribe
* indicates required
Explaining Ukraine with Kate Tsurkan
* indicates required
Successfuly subscribed
Thank you for signing up for this newsletter. We’ve sent you a confirmation email.