Skip to main content

Russia Targets Ukrainian Conscripts With Malware

Russian-linked cyber espionage group UNC5812 has been targeting Ukrainian military conscripts with Windows and Android malware in a sophisticated campaign. Disguised as recruitment avoidance tools, the malware has been distributed via a Telegram channel named “Civil Defense” and a website registered earlier this year. The campaign was uncovered by Google’s Threat Analysis Group (TAG) and Mandiant in late 2024.

The primary target of this cyber campaign is Ukrainian men of draft age. UNC5812 promotes what it claims is “free software” to help users track and avoid military recruiters. The apps, branded as “Sunspinner,” are designed to appear as crowd-sourced tools but instead deliver potent malware to compromise victims' devices.

According to Google’s report, the Android version installs CraxsRAT, a notorious remote access trojan (RAT) with capabilities such as real-time location tracking, keystroke logging, and camera control. On Windows devices, a malicious ZIP file drops Pronsis Loader, which initiates a multi-stage delivery chain that results in the execution of the PureStealer info-stealer.

The persona of "Civil Defense" does not impersonate any legitimate Ukrainian governmental body. Instead, it uses Telegram and a website to distribute anti-recruitment narratives, intending to foster distrust towards Ukraine’s military efforts.

To deceive users, the malware prompts victims to disable Google Play Protect, making the infection process seamless and reducing the likelihood of detection. Once installed, the Android malware exfiltrates sensitive data such as contacts, SMS, and credentials. The Windows malware steals browser-stored information, cryptocurrency wallet details, and other sensitive information.

This campaign fits into a broader Russian strategy to use cyber tools as both espionage and psychological warfare. As The Record highlighted, UNC5812 doesn’t just stop at malware. Its influence operations encourage Telegram followers to submit videos of alleged injustices at recruitment centers, further fueling distrust towards the Ukrainian military.

Google’s TAG emphasized the growing importance of messaging apps like Telegram in the broader cyber dimensions of Russia's war against Ukraine. As long as these platforms continue to serve as crucial information hubs during the war, they are likely to remain central to future cyber operations.



See TessMore Internet Business Must-Reads
Labels:

Comments

Post a Comment

Popular posts from this blog

Thousands Still Available in COVID Relief with These Small Business Grants

Building improvements can be a major expense for small businesses. And many had to make certain changes to navigate the past few years. Restaurants set up outdoor patios. Historic properties restored their storefronts. And offices added energy efficient features. Many businesses also have improvement projects planned for 2022. Luckily, many small business grant programs across the country make these projects more attainable, thus improving the customer experience and the community at large. Here are some current small business grant opportunities for building improvements, pandemic recovery, and more. Raleigh Building-Up Fit Grant Raleigh’s Small Business Development department is launching a new grant opportunity for local businesses. The Building-Up Fit Grant offers matching reimbursement funds up to $25,000 for eligible renovation projects. Businesses with 50 employees or less can apply for grants to cover projects that significantly improve the appearance and value of the pro...
Post a Comment
Read more

Only 1 in 10 NFT Owners Have Never Experienced a Scam

A new survey from PrivacyHQ reveals 90% or nine out of 10 respondents experienced an NFT scam. This level of uncertainty is cause for concern for a relatively new marketplace that is generating billions of dollars. Only 1 in 10 NFT Owners Have Never Experienced a Scam The PrivacyHQ survey spoke to 1,008 people in the U.S. who are actively investing in and own NFTs. And according to the report, there are some horror stories and great lessons to be learned. The key takeaways from the survey are: Less than half of NFT owners feel their NFTs are secure Two out of 3 respondents said they had panic-sold NFTs in the past Nine out of 10 respondents had experienced an NFT scam Half of the respondents had lost access to their NFTs at some point When it comes to NFT scams there were multiple ways in which buyers were scammed. Topping the list of the most common scams experienced by these respondents starts out with the NFT provider shutting down or changing their URL at 44.8%. Next is...
1 comment
Read more

8 Product Recommendation Email Examples to Drive Sales in

Struggling to drive more leads and sales with your email marketing? One effective strategy to increase revenue and sales is through strategic product recommendation emails. By showcasing personalized product recommendations at the right time and using proven elements and strategies, you can engage your subscribers and convince them to make a purchase. In this article, we’ll cover what a product recommendation email actually is and discuss the benefits of sending them. We’ll also share some great examples and best practices that can help you increase sales and drive revenue for your business. What Is a Product Recommendation Email? Advantages of Sending Product Recommendation Emails 8 Product Recommendation Email Examples to Drive More Leads Best Product Recommendation Emails Practices Increase Sales With Effective Product Recommendation Emails! What Is a Product Recommendation Email? Have you ever received an email from your favorite eCommerce store showcasing products th...
Post a Comment
Read more