Analysis of Attack Activities of Suspected APT Organization UNC1151 Against Ukraine and Other Countries
released on 2022-03-14 @ 01:01:20 PM
In February 2022, following the outbreak of the Russian-Ukrainian conflict, the Ukrainian Computer Emergency Response Team (CERT-UA) and the State Special Service for Communications and Information Protection of Ukraine (SSSCIP Ukraine) issued phishing email alerts concerning UNC1151's private emails targeting members of the Ukrainian Armed Forces. Extensive phishing campaign of email accounts. On March 1, Proofpoint disclosed that the attackers used the suspected stolen mailboxes of Ukrainian military personnel to launch a phishing attack on European government personnel involved in the management of the logistics of refugees fleeing Ukraine .