Cybersecurity researchers on Monday said they uncovered evidence of attempted attacks by a Russia-linked hacking operation targeting a Ukrainian entity in July 2021.
Broadcom-owned Symantec, in a new report published Monday, attributed the attacks to an actor tracked as Gamaredon (aka Shuckworm or Armageddon), a cyber-espionage collective known to be active since at least 2013.
In November 2021, Ukrainian intelligence agencies branded the group as a "special project" of Russia's Federal Security Service (FSB), in addition to pointing fingers at it for carrying out over 5,000 cyberattacks against public authorities and critical infrastructure located in the country.
Gamaredon attacks typically originate with phishing emails that trick the recipients into installing a custom remote access trojan called Pterodo. Symantec disclosed that, between July 14, 2021 and August 18, 2021, the actor installed several variants of the backdoor as well as deployed additional scripts and tools.
"The attack chain began with a malicious document, likely sent via a phishing email, which was opened by the user of the infected machine," the researchers said. The identity of the affected organization was not disclosed.
Towards the end of July, the adversary leveraged the implant to download and run an executable file that acted as a dropper for a VNC client before establishing connections with a remote command-and-control server under their control.
"This VNC client appears to be the ultimate payload for this attack," the researchers noted, adding the installation was followed by accessing a number of documents ranging from job descriptions to sensitive company information on the compromised machine.
Ukraine Calls Out False Flag Operation in Wiper Attacks
The findings come amidst a wave of disruptive and destructive attacks levied against Ukrainian entities by alleged Russian state-sponsored actors, resulting in the deployment of a file wiper dubbed WhisperGate, around the same time multiple websites belonging to the government were defaced.
Subsequent investigation into the malware has since revealed that the code used in the wiper was re-purposed from a faux ransomware campaign called WhiteBlackCrypt that was aimed at Russian victims in March 2021.
Interestingly, the ransomware is known to include a trident symbol — that is part of Ukraine's coat of arms — in the ransom note it displays to its victims, leading Ukraine to suspect that this may have been a false flag operation deliberately intended to blame a "fake" pro-Ukrainian group for staging an attack on their own government.
- Pentest Tools Apk
- Hacking Tools Online
- Github Hacking Tools
- Hacker Tools Github
- Hacking Tools Github
- Hack And Tools
- Hacker Tools For Ios
- Hack Tools For Ubuntu
- Hacker Security Tools
- Hacker Tools For Windows
- Best Pentesting Tools 2018
- New Hack Tools
- Hacker Tools Apk Download
- Usb Pentest Tools
- How To Hack
- Pentest Tools Subdomain
- Hacker Hardware Tools
- Underground Hacker Sites
- Android Hack Tools Github
- Pentest Tools Android
- Pentest Tools Linux
- Hacking Tools For Games
- Install Pentest Tools Ubuntu
- Hacker Search Tools
- Blackhat Hacker Tools
- Top Pentest Tools
- Pentest Tools Port Scanner
- Hackers Toolbox
- Hacker Tools Apk Download
- Hack Apps
- Hacking Tools For Games
- Hacking Tools Usb
- Hack Tools Pc
- Wifi Hacker Tools For Windows
- Hacking Tools Online
- Hacking Tools Mac
- Hacking Tools Windows
- Hacking Tools Pc
- What Is Hacking Tools
- Game Hacking
- What Is Hacking Tools
- New Hacker Tools
- Pentest Tools Website
- Hack Tools
- Hacking Tools For Beginners
- Best Hacking Tools 2019
- Pentest Tools Url Fuzzer
- Hack And Tools
- Hacker Tools Software
- Hacking Tools Github
- Hack Tools For Ubuntu
- Hacking Tools For Windows 7
- Hacking Tools Name
- Hacker Tools Free Download
- Pentest Tools Apk
- Pentest Tools For Mac
- Hacker Techniques Tools And Incident Handling
- Physical Pentest Tools
- Hacker Tools Software
- Nsa Hack Tools
- Hack Tools
- Android Hack Tools Github
- Free Pentest Tools For Windows
- Hack Tools 2019
- Beginner Hacker Tools
- Hacker Techniques Tools And Incident Handling
- Termux Hacking Tools 2019
- Tools 4 Hack
- Usb Pentest Tools
- Hacking Tools And Software
- Growth Hacker Tools
- Hack Tools Online
- Hack And Tools
- Hacking Apps
- Nsa Hacker Tools
- Pentest Tools Framework
- Hacker Search Tools
- Pentest Tools Windows
- Hacker Tools For Ios
- Hacker Search Tools
- Nsa Hacker Tools
- Pentest Tools Port Scanner
- Hacking Tools
- Hack Tools For Games
- Pentest Tools For Windows
- Bluetooth Hacking Tools Kali
- Ethical Hacker Tools
- Hacker Tools Mac
- Hack Rom Tools
- Pentest Tools Website Vulnerability
- Hacker Tool Kit
- Best Pentesting Tools 2018
- Hacker Tools
- Ethical Hacker Tools
- Hacking Tools Usb
- Hacker Tools List
- Pentest Tools Open Source
- Hacker Tools For Ios
- Hacking Tools For Beginners
- Hacking Apps
- Hacker Tools 2019
- Nsa Hack Tools Download
- Hacking Tools Github
- Top Pentest Tools
- Pentest Tools Free
- New Hack Tools
- Hacker Techniques Tools And Incident Handling
- Pentest Tools Tcp Port Scanner
- Hacker Tools Apk Download
- Pentest Tools Windows
- Hack Tools Download
- Black Hat Hacker Tools
- Underground Hacker Sites
- Hacking Tools For Games
- Hack Apps
- New Hacker Tools
- Hack Website Online Tool
- Game Hacking
- Hacker Security Tools
- Install Pentest Tools Ubuntu
- Hackrf Tools
- Usb Pentest Tools