Latest cybersecurity reporting from selected sources.

Malware campaign uses Ukrainian email service for credibility, deploying "BadPaw" to execute attacks

Sandworm deployed data wipers against Ukrainian governmental entities and companies in the energy, logistics and grain sectors

Ukraine’s CERT-UA has identified a new AI-powered malware, dubbed “LameHug,” which executes commands on compromised Windows systems in cyber-attacks, targeting the nation’s security and defense sector

New PathWiper malware targeted Ukrainian critical infrastructure, using legitimate tools for cyber-attacks

Cyber espionage campaign linked to North Korean actor TA406 targeted Ukrainian government entities

A large-scale phishing campaign using DarkWatchman and Sheriff malware has been observed targeting companies in Russia and Ukraine

Microsoft detailed how Russian espionage group Secret Blizzard is leveraging infrastructure of other threat actors to target the Ukrainian military with custom malware

Hive0145 is targeting Spain, Germany, Ukraine with Strela Stealer malware in invoice phishing tactic

Google researchers have observed Russian threat actor UNC5812 using a malware campaign via Telegram to access the devices of Ukrainian military recruits

CERT-UA said the phishing campaign lures victims into downloading malware used to exfiltrate files containing sensitive personal data

Discovered by FortiGuard Labs, the attack leverages an Excel file embedded with a VBA macro

SentinelLabs researchers identified the malware as a new variant of AcidRain, which shut down thousands of Viasat satellites in Ukraine and Western Europe in 2022

The US DoJ said that the Ukrainian national has pleaded guilty to leading the Zeus and IcedID malware campaigns, which resulted in losses of tens of millions of dollars

Infamous Chisel, which enables unauthorized access to compromised Android devices used by the Ukrainian military, has been linked to Sandworm

The group utilize malware like GAMMASTEEL to rapidly exfiltrate files within 30-50 minutes

Researchers say the specialized OT malware has similarities with Industroyer, which was used to take down power in Kiev, Ukraine, in 2016

Weekly attacks targeting Ukraine decreased by 44% between October 2022 and February 2023

Somnia malware hijacks Telegram and VPN accounts

Researchers reveal the Sandworm group attempted to cut power to a large region of Ukraine

CaddyWiper looks like nothing else, says ESET