Skip to content
Edit post

Hackers impersonated Ukrainian agencies in emails to Polish officials

by Abbey Fenbert December 9, 2023 4:21 AM 1 min read
In this photo illustration, the 502 Bad Gateway message appears on the Defense Ministry's website with the Ukrainian flag in the background. (Pavlo Gonchar/SOPA Images/LightRocket via Getty Images)
This audio is created with AI assistance

Support independent journalism in Ukraine. Join us in this fight.

Become a member Support us just once

The hacker group UAC-0050 sent emails claiming to be from Ukrainian government agencies to Polish state authorities, the State Special Communications Service reported on Dec. 8.

Government employees in Poland and Ukraine received emails with subject lines related to "debts" and "legal claims," according to an investigation carried out by the Computer Emergency Response Team of Ukraine (CERT-UA). The emails also contained attachments in the form of password-protected RAR files.

When opened, these files could infect users' computers with RemcosRAT or MeduzaStealer malware.

The emails came from legitimate government accounts that had been compromised, according to CERT-UA. Many of them came from the gov.ua domain.

CERT-UA is reportedly taking measures to localize and counteract the cyber threat.

The UAC-0050 hacker group has previously sent emails impersonating the Security Service of Ukraine (SBU), the Pechersk Court, and Ukrtelecom.

The State Special Communications Service came under new leadership on Dec. 1. Yurii Myronenko was named the new agency head after its previous chief Yurii Shchyhol was dismissed amid charges of embezzlement.

Ukraine war latest: Scammers reportedly cheat volunteers out of millions on drone purchases
Key developments on Dec. 8: * Investigation reveals scheme to steal money from volunteers on drone purchases * Germany hands over shells, drones, other equipment in latest delivery to Ukraine * Ambassador: Russia holds 500 Ukrainian medical workers captive * Russian strike on Dnipropetrovsk Obl…
Before you skip this banner, we want to tell you something…

The Kyiv Independent doesn’t depend on a wealthy owner or an oligarch — in 2023, 80% of our revenue was from reader contributions . It’s thanks to them that we don’t have to rely on a single owner.

Support us now and help maintain our independent model and keep our articles free for everyone. Your contributions allow us to cover journalists’ salaries, report from the front lines, and fund projects like our War Crimes Investigations Unit.

visa masterCard americanExpress

News Feed

Ukraine Daily
News from Ukraine in your inbox
Ukraine news
Please, enter correct email address
12:28 AM

Exclusive: Nepali POW questioned by Ukrainian authorities

The Kyiv Independent has obtained footage of Ukrainian authorities questioning a Nepali prisoner of war captured when he was fighting for Russia in Ukraine. The footage was obtained from intelligence sources. The Kyiv Independent edited it for brevity.
MORE NEWS

Editors' Picks

Enter your email to subscribe
Please, enter correct email address
Subscribe
* indicates required
* indicates required
Subscribe
* indicates required
* indicates required
Subscribe
* indicates required

Subscribe

* indicates required
Subscribe
* indicates required

Subscribe

* indicates required
Subscribe
* indicates required

Subscribe

* indicates required
Successfuly subscribed
Thank you for signing up for this newsletter. We’ve sent you a confirmation email.