A Russian-affiliated threat actor has been seen launching a social engineering attack against a European financial institution in an attempt to obtain intelligence or steal money, which suggests that the threat actor may be extending its reach beyond Ukraine to include organizations that aid the war-torn country.
Targeting an unidentified organization engaged in regional development and rehabilitation projects, the action has been linked to a cybercrime organization known as UAC-0050 (also known as the DaVinci Group). Mercenary Akula is the moniker that BlueVoyant has assigned to the threat cluster. Earlier this month, the attack was reported.
According to a study published with The Hacker News by researchers Patrick McHale and Joshua Green, the assault used a spoof Ukrainian judicial domain to send an email with a link to a remote access payload read more about UAC-0050 Targets European Financial Institution With Spoofed Domain and RMS Malware.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.