Cybersecurity incident — 2019-04-16 00:00:00
Affected organization: Ukrainian military
Affected country: Ukraine
Industry: Public Administration
Event type: Exploitive
Event subtype: Exploitation of Application Server,Exploitation of End Hosts
Motive: Undetermined
Actor: Undetermined
Actor type: Criminal
Actor country: Undetermined

Researchers from FireEye reveal that multiple Ukrainian military departments were targeted by a spear phishing campaign which attempted to drop a RATVERMIN backdoor as part of a second-stage payload delivered with the help of a Powershell script.