Ukraine's CERT team says a threat actor it tracks as UAC-0020 (Vermin) is targeting its military with spear-phishing attacks designed to deliver the SPECTR infostealer.
The group has returned with new attacks after first being spotted in March 2022, shortly after Russia's invasion of Ukraine.
Officials claim the Vermin group receives orders from law enforcement agencies in the Luhansk occupied territory.
https://cert.gov.ua/article/6279600
Catalin Cimpanu /
npub1tq…3aefw
2024-06-06 16:40:38
Author Public Key
npub1tqfukrqgh928vktkl6vx063ck2c4yn3ek8m44v3txfhztqe65anq63aefwPublished at
2024-06-06 16:40:38Event JSON
{
"id": "868a7b4c752644d3667d39cf10fefcacd9395992f02ded999b9d7649b797c403",
"pubkey": "5813cb0c08b954765976fe9867ea38b2b1524e39b1f75ab22b326e25833aa766",
"created_at": 1717692038,
"kind": 1,
"tags": [
[
"proxy",
"https://mastodon.social/users/campuscodi/statuses/112570665407157399",
"activitypub"
]
],
"content": "Ukraine's CERT team says a threat actor it tracks as UAC-0020 (Vermin) is targeting its military with spear-phishing attacks designed to deliver the SPECTR infostealer.\n\nThe group has returned with new attacks after first being spotted in March 2022, shortly after Russia's invasion of Ukraine.\n\nOfficials claim the Vermin group receives orders from law enforcement agencies in the Luhansk occupied territory.\n\nhttps://cert.gov.ua/article/6279600",
"sig": "8c6ed956198d1f81996b9de3a976bc12361f868eea69e3ca058a3b55e97b2d4be1f1bcc16ccb1aba2b9815138cad7557c410fdf952a9c6006b31c749dbb01c5d"
}