The Ukrainian Government Computer Emergency Response Team CERT-UA has warned about the distribution of new dangerous letters that are distributed among Ukrainian government organizations. They use the theme of salary, according to the State Service for Special Communications..
[see_also ids\u003d"
So, these letters contain the file “Change of payment for services with remuneration. docx" Opening this document will infect your computer with Cobalt Strike Beacon malware.
CERT-UA initiated blocking of the domain name and the corresponding server.
Earlier, CERT-UA recorded a cyber attack by the Sandworm group on Ukrainian energy facilities using Industroyer2 and CaddyWiper malware..
The victim organization suffered two waves of attacks, the first of which took place no later than February 2022. On April 8, attackers planned to turn off electrical substations and disable the enterprise's infrastructure. But the implementation of the intent of the attackers managed to prevent.