Cybersecurity incident — 2022-02-11 00:00:00
Affected organization: Undetermined
Affected country: Ukraine
Industry: Finance and Insurance
Event type: Exploitive
Event subtype: Exploitation of End Host
Motive: Political-Espionage
Actor: UAC-0056
Actor type: Nation-State
Actor country: Russian Federation

CERT-UA reported mass distribution of phishing emails supposedly originating from Ukrainian state bodies and targeting Ukrainian entities. The lure is a Ukrainian language translation software, leading to the infection of GrimPlant and GraphSteel.