Under the Telegram alias Civil Defense, a suspected Russian hybrid espionage and influence operation has been seen distributing a combination of Windows and Android malware to the Ukrainian military.
Under the handle UNC5812, Mandiant and Google’s Threat Analysis Group (TAG) are monitoring the behavior. The threat group was established on September 10, 2024, and runs the civildefense_com_ua Telegram channel. There are 184 subscribers to the channel as of this writing. Additionally, it has a website registered on April 24, 2024, at civildefense.com[.]ua.
In a report published with The Hacker News, Civil Defense asserts that it offers free software applications that allow prospective conscripts to observe and share crowdsourced locations of Ukrainian military recruiters read more about Russian Espionage Group Targets Ukrainian Military with Malware via Telegram.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.