Cybersecurity researchers on Monday said they uncovered evidence of attempted attacks by a Russia-linked hacking operation targeting a Ukrainian entity in July 2021.
Broadcom-owned Symantec, in a new report published Monday, attributed the attacks to an actor tracked as Gamaredon (aka Shuckworm or Armageddon), a cyber-espionage collective known to be active since at least 2013.
In November 2021, Ukrainian intelligence agencies branded the group as a "special project" of Russia's Federal Security Service (FSB), in addition to pointing fingers at it for carrying out over 5,000 cyberattacks against public authorities and critical infrastructure located in the country.
Gamaredon attacks typically originate with phishing emails that trick the recipients into installing a custom remote access trojan called Pterodo. Symantec disclosed that, between July 14, 2021 and August 18, 2021, the actor installed several variants of the backdoor as well as deployed additional scripts and tools.
"The attack chain began with a malicious document, likely sent via a phishing email, which was opened by the user of the infected machine," the researchers said. The identity of the affected organization was not disclosed.
Towards the end of July, the adversary leveraged the implant to download and run an executable file that acted as a dropper for a VNC client before establishing connections with a remote command-and-control server under their control.
"This VNC client appears to be the ultimate payload for this attack," the researchers noted, adding the installation was followed by accessing a number of documents ranging from job descriptions to sensitive company information on the compromised machine.
Ukraine Calls Out False Flag Operation in Wiper Attacks
The findings come amidst a wave of disruptive and destructive attacks levied against Ukrainian entities by alleged Russian state-sponsored actors, resulting in the deployment of a file wiper dubbed WhisperGate, around the same time multiple websites belonging to the government were defaced.
Subsequent investigation into the malware has since revealed that the code used in the wiper was re-purposed from a faux ransomware campaign called WhiteBlackCrypt that was aimed at Russian victims in March 2021.
Interestingly, the ransomware is known to include a trident symbol — that is part of Ukraine's coat of arms — in the ransom note it displays to its victims, leading Ukraine to suspect that this may have been a false flag operation deliberately intended to blame a "fake" pro-Ukrainian group for staging an attack on their own government.
More articles
- Pentest Tools Tcp Port Scanner
- Nsa Hack Tools Download
- What Are Hacking Tools
- Pentest Tools Subdomain
- Hacking Tools For Windows 7
- What Are Hacking Tools
- Hacker Tools Apk
- Pentest Tools Framework
- Hacking Tools Name
- Best Hacking Tools 2020
- Game Hacking
- Pentest Tools Free
- Hacker Tools Mac
- Pentest Tools Github
- Hacking Tools Software
- Growth Hacker Tools
- Hacker Tools Github
- Hacker Security Tools
- Hack Tool Apk No Root
- Hacker Tools Online
- How To Make Hacking Tools
- Pentest Tools For Windows
- Pentest Tools Download
- Hacker Tools Apk
- Hacking Tools For Mac
- Hack Tools Github
- Hacking Tools Online
- Pentest Tools List
- Hacker Tools
- Free Pentest Tools For Windows
- Hacking Tools Online
- Hacker Search Tools
- Hacking Tools
- Hack Tools For Ubuntu
- Kik Hack Tools
- Hacker Tools 2019
- Pentest Tools Linux
- Hacker Hardware Tools
- Bluetooth Hacking Tools Kali
- Pentest Tools Linux
- Pentest Tools Url Fuzzer
- Hack Apps
- Hacker Techniques Tools And Incident Handling
- Pentest Tools Website Vulnerability
- Hackrf Tools
- Pentest Tools For Mac
- Hacking Tools Name
- Pentest Tools Kali Linux
- Underground Hacker Sites
- Hack Tools For Mac
- Bluetooth Hacking Tools Kali
- Beginner Hacker Tools
- Best Hacking Tools 2019
- Tools Used For Hacking
- Pentest Tools Find Subdomains
- Pentest Tools Tcp Port Scanner
- Pentest Tools Online
- Pentest Tools Free
- Hack Tools Pc
- Computer Hacker
- Easy Hack Tools
- Pentest Tools For Mac
- Hacking Tools Download
- Pentest Reporting Tools
- Pentest Tools Bluekeep
- Black Hat Hacker Tools
- Hacking Tools For Mac
- Top Pentest Tools
- Pentest Tools Linux
- Hacking Tools Free Download
- Hacking Tools For Windows Free Download
- Hacker Tools Online
- Hack Website Online Tool
- Ethical Hacker Tools
- Pentest Tools Framework
- Tools 4 Hack
- Hack Tools
- Pentest Tools Apk
- Hacking Tools Windows
- Hacking Tools For Windows
- Hack Tools Github
- Pentest Tools Framework
- Hacker Tools Free Download
- Pentest Tools Download
- Free Pentest Tools For Windows
- Hack Tools Download
- Pentest Tools Bluekeep
- How To Make Hacking Tools
- Pentest Tools Apk
- Hacking Tools For Games
- Hack And Tools
- Hacks And Tools
- Hack Apps
- Nsa Hacker Tools
- Pentest Tools Subdomain