Hackers try to attack Ukrainian defense enterprises - Special Communications Service

The UAC-0185 group tried to carry out a cyberattack against Ukrainian defense enterprises and security and defense forces.

This was reported by the State Service for Special Communications and Information Protection of Ukraine.

It is noted that the attack began with phishing emails disguised as official messages from the Ukrainian Union of Industrialists and Entrepreneurs. They were about an invitation to a conference dedicated to the transition of domestic defense-industrial complex products to NATO technical standards, which was held on December 5 in Kyiv.

"The email contained a hyperlink "The attachment contains important information for your participation". Following this link and further opening the attached files could lead to infection of the computer," the message says.

It is reported that the UAC-0185 group, which has been active since at least 2022, is responsible for the attack. The group focused on stealing credentials for the Signal, Telegram, WhatsApp messengers and military systems DELTA, TENETA, and Kropyva.

"Less often carried out cyberattacks to gain unauthorized remote access to computers of employees of defense enterprises and representatives of security and defense forces," the State Service for Special Communications added.

As a reminder, russia combines massive shelling with hacker attacks on energy infrastructure.