Cybersecurity incident — 2022-09-01 00:00:00
Affected organization: Ukrainian-based organizations
Affected country: Ukraine
Industry: Public Administration
Event type: Exploitive
Event subtype: Exploitation of Network Infrastructure
Motive: Political-Espionage
Actor: FSB 18th Center for Information Security (Berserk Bear)
Actor type: Nation-State
Actor country: Russian Federation

Researchers from Mandiant reveal the details of an attack against a Ukrainian organization, carried out by the Russian state-sponsored threat actor Turla, and leveraging a legacy Andromeda malware likely deployed by other hackers via an infected USB drive.