State Service of Special Communications and Information Protection of Ukraine

«I'm not a robot»: Yet another large-scale cyber attack targeting local authorities in Ukraine has been uncovered by CERT-UA. The hackers imitate a bot verification screen to steal browser data and may be connected with the APT28 group. 👀 Learn more👇 https://lnkd.in/dMBFiZDa

Grateful to European Union Agency for Cybersecurity (ENISA) for organizing the joint workshop on NIS2. The Directive implementation is crucial, as it will help to significantly increase Ukraine's resilience to cyber threats. Looking forward to more fruitful collaborations in the future! https://lnkd.in/d5CrNxt5

🕵️ CERT-UA is actively monitoring a new cyber threat, identified as UAC-0218. The malicious activity is aimed at stealing Ukrainians' personal data using fake "bills", to use it for blackmail or theft. https://lnkd.in/d_4hFG24

APT29 aka Midnight Blizzard recently attempted to phish thousands of people. Building on work by CERT-UA, Amazon recently identified internet domains abused by APT29, a group widely attributed to Russia's Foreign Intelligence Service (SVR). In this instance, their targets were associated with government agencies, enterprises, and militaries, and the phishing campaign was apparently aimed at stealing credentials from Russian adversaries. APT29 sent the Ukrainian language phishing emails to significantly more targets than their typical, narrowly targeted approach. Some of the domain names they used tried to trick the targets into believing the domains were AWS domains (they were not), but Amazon wasn't the target, nor was the group after AWS customer credentials. Rather, APT29 sought its targets’ Windows credentials through Microsoft Remote Desktop. Upon learning of this activity, we immediately initiated the process of seizing the domains APT29 was abusing which impersonated AWS in order to interrupt the operation. CERT-UA has issued an advisory with additional details on their work. I’d like to thank the cyber threat intelligence teams at Amazon and CERT-UA for all their efforts to make the internet more secure. https://lnkd.in/eaQKjtdw

CERT-UA has identified a new malicious email campaign exploiting the appeal of integrating popular services like Amazon or Microsoft and implementing a zero-trust architecture. Evidence suggests the attacks are likely to extend beyond Ukraine. Learn more: https://lnkd.in/deQAdyXh

Estonia has always been a staunch ally of Ukraine in our fight against russian invasion. The signing of MoU between EE RIA and SSSCIP in cyber defense will allow us to exchange knowledge and counter modern cyber threats more effectively. https://lnkd.in/dYPQqTbr

🧐 CERT-UA's engineer Nazar Tymoshyk attended the "Objective for the We v2.0" conference and shared insights on the change in tactics of russian hackers over time, new malware etc. 🙏 Thanks to Objective-See Foundation, Inc and MacPaw 🇺🇦 for hosting a fantastic event in Kyiv! https://lnkd.in/dnnsC2ay

👨🏫 The State Cyber Protection Center (SCPC) at SSSCIP hosted a 3-day training session for cybersecurity specialists of industrial control systems (ICS) for critical infrastructure. Learn more on our website👇 🌐 bit.ly/3YnD4zm #ICS #CyberSecurity #UkraineStrong #OT #IT

🧐 Learn how message apps and dating platforms are used in intelligence operations by russian hackers against Ukrainian military. The H1 2024 report by SSSCIP contains detailed analysis of cyber threats and recommendations on how to counter them👇 https://t.co/4SBs5fEqy3

From destruction to covert operations and elaborate supply chain attacks: learn how russian hackers' attacks changed through the war in SSSCIP's new report. Download and read below👇 🌐 https://t.co/4SBs5fEqy3 #CyberSecurity #hackers #RussianUkrainianWar