UAC-0241

No known aliases in database

▲ High Threat

CERT-UA#18329, Sumy Campaign

Origin Russia

Sponsor Russian Federation

Motivation espionage

Target Sectors

Educational institutions State authorities Ukrainian government infrastructure

Spear-phishing

ZIP archives

LNK files

HTA execution (mshta.exe)

JavaScript downloaders

Go-based custom malware (GAMYBEAR)

Backdoors

CISA Advisories ↗

Hacking the mainframe…