The Computer Emergency Response Team of Ukraine (CERT-UA) has issued a warning regarding a recent phishing effort that disseminates malware with the ability to access remote desktops by impersonating the Security Service of Ukraine.
Under the code UAC-0198, the organization is keeping tabs on the action. Since July 2024, an estimated 100 or more computers—including those connected to the nation’s federal agencies—have become infested.
Attack chains use a large-scale email distribution method to send a ZIP archive file that contains an MSI installer file, which when opened, releases malware known as ANONVNC.
ANONVNC enables covert illegal access to the compromised computers and is based on the open-source remote management application MeshAgent read more about Ukraine Warns of New Phishing Campaign Targeting Government Computers.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.