Latest cybersecurity reporting from selected sources.

A spear phishing campaign dubbed PhantomCaptcha targeted Ukraine’s war relief efforts and regional government administrations for a single day in October

SentinelLABS Researchers have uncovered a new phishing campaign, PhantomCaptcha, targeting aid organizations supporting Ukraine

A large-scale phishing campaign using DarkWatchman and Sheriff malware has been observed targeting companies in Russia and Ukraine

A new phishing attack by UAC-0006 has been discovered targeting PrivatBank with malicious files in password-protected archives to evade detection

CERT-UA has issued a warning about phishing emails targeting Ukrainian defense companies and security forces

Hive0145 is targeting Spain, Germany, Ukraine with Strela Stealer malware in invoice phishing tactic

CERT-UA said the phishing campaign lures victims into downloading malware used to exfiltrate files containing sensitive personal data

CERT-UA has warned that a mass phishing campaign impersonating Ukraine’s Security Services has infected more than 100 government devices

Unit 42 researchers believe a Russian threat group repurposed a legitimate flyer for a BMW car sent to embassies in Kyiv, Ukraine

The BlackBerry team suspects spear-phishing as the primary vector utilized by the RomCom group

More than 100 sites created to lure European victims

Phishing campaign spotted by CERT-UA

Thousands scammed by spoofed EU portals

Google claims state actors are using Ukraine war as a phishing lure

Cyber-espionage campaigns make the most of big news event

Cyber-criminals impersonate aid organizations to steal crypto intended for Ukraine

Gang tricked an estimated 70,000 victims