Cybersecurity incident
Date: 2022-02-01 00:00:00
Affected organization: Ukrainian Ministry of Foreign Affairs
Affected country: Ukraine
Industry: Public Administration
Event type: Exploitive
Event subtype: Exploitation of End Host
Motive: Political-Espionage
Actor: FSB 18th Center for Information Security (Berserk Bear)
Actor type: Nation-State
Actor country: Russian Federation
Description: A malicious Word document attached to a spear-phishing email allegedly targeted the Ukrainian Ministry of Foreign Affairs. The file was backdoored with a VBS script to download and install a persistent file on the victim's machine.