Tag: CERT-UA

Russian Sandworm hackers breach Kyivstar network, causing devastating damage and signaling warning to the West

Ukraine's cyber spy chief disclosed Friday that Russian hackers had infiltrated the system of Kyivstar, a major Ukrainian telecoms company, since at least May of the previous year. This cyberattack serves as a significant warning to the Western countries, he…

Ukraine's CERT discloses cyberattack on critical energy infrastructure by APT28 hacker group

Ukraine’s CERT discloses cyberattack on critical energy infrastructure by APT28 hacker group

The Computer Emergency Response Team of Ukraine (CERT-UA) recorded on Tuesday a targeted cyber attack against a critical energy infrastructure facility in the country. The advisory added that the described activity is carried out by the Russian state-sponsored APT28 hacker…

Recorded Future details Russia APT group UAC-0113 emulating telecommunication providers across Ukraine

Recorded Future details Russia APT group UAC-0113 emulating telecommunication providers across Ukraine

Recorded Future released a Monday report that profiles the unique infrastructure used by the threat hacker group UAC-0113, which is linked with moderate confidence by the Computer Emergency Response Team of Ukraine (CERT-UA) to the Russian advanced persistent threat (APT)…

ESET releases details of TA410 APT group, including its cyberespionage TTPs and activity

ESET releases details of TA410 APT group, including its cyberespionage TTPs and activity

ESET researchers have released a detailed profile of TA410 APT group, including its modus operandi and toolset that includes a new version of FlowCloud. The team also threw light on the very complex backdoor containing espionage capabilities. The TA410 cyberespionage…

ESET, CERT-UA respond to Sandworm attack on Ukrainian energy provider using Industroyer2 malware

ESET, CERT-UA respond to Sandworm attack on Ukrainian energy provider using Industroyer2 malware

ESET researchers have collaborated with CERT-UA to respond to a cyber incident affecting an energy provider in Ukraine. The Sandworm attackers are said to have attempted to deploy the Industroyer2 malware against high-voltage electrical substations in Ukraine. The attack used…