The Security Service of Ukraine (SBU) discovered a new targeted attack against information and telecommunication systems of Ukrainian government organisations
The Security Service of Ukraine (SBU) discovered a new targeted attack against information and telecommunication systems of Ukrainian government organisations. The SBU linked the attack to Russia-linked APT group BlackEnergy. “The Security Service of Ukraine has received more evidence of the aggressive actions of Russian intelligence services against Ukraine in cyberspace using a controlled hacker group responsible for carrying out cyberattacks on Ukraine's critical infrastructure facilities during 2015-2017, known as BlackEnergy and NotPetya” said in the press release published by SBU. The malware used in the attack is capable of remote administration of operating system processes, file and password extraction and tracking user actions. According to the investigation conducted by SBU and an antivirus company, the malware used in the attack was an updated version of Industroyer backdoor. Both the malware have similar features such as code snippets, computing capabilities of infected systems. SBU also discovered that the tool used in this attack were seen used by the hacker group in the previous cyber attacks. “Specialists established objects of a cyberattack, helped localize its consequences and minimize cyber threats to the IT infrastructure of government agencies.” For the latest cyber threats and the latest hacking news please follow us on Facebook, Linkedin and Twitter.
You may be interested in reading:Google Shutdowns Google+ After Bug Exposed User Data of 500,000 Users