Cybersecurity incident — 2022-02-24 00:00:00
Affected organization: Undetermined
Affected country: Ukraine
Industry: Finance and Insurance
Event type: Mixed
Event subtype: Exploitation of End Host
Motive: Sabotage
Actor: Ghostwriter
Actor type: Nation-State
Actor country: Belarus

A phishing campaign was observed using a possibly compromised Ukrainian armed service member's email account, to target European government personnel involved in managing the logistics of refugees fleeing Ukraine. Researchers indicate there was a clear preference for targeting individuals with responsibilities related to transportation, financial and budget allocation, administration, and population movement within Europe.