Cybersecurity incident — 2022-04-28 00:00:00
Affected organization: Undetermined
Affected country: Ukraine
Industry: Finance and Insurance
Event type: Exploitive
Event subtype: Exploitation of End Host
Motive: Undetermined
Actor: UAC-0098
Actor type: Criminal
Actor country: Russian Federation

A spear phishing campaign against the State authorities of Ukraine used emails entitled "Decree of the Press Office of the European Union No. 576/22 on uninterrupted security measures" to deliver an ISO image file. As a result, the devices were infected with the malware "Meterpreter".