#Ukraine
All CosmicBytez Labs articles tagged #Ukraine, across news, security advisories, how-to guides, and projects.
- News
Moscow Police Detain Suspected DataSuckers Hackers Linked to Breaches in Ukraine and Russia
Russian police detained three suspected DataSuckers hackers after breaches of Dodo Pizza, Tez Tour, and Ukraine's ATB Market.
- News
Ukraine Says Elon Musk's Starshield Service Partially Restored After Restrictions Disrupted Drone Missions
Ukraine's Defense Ministry says Starshield connectivity for moving terminals is restored, days after unannounced speed cap disrupted frontline drone missions.
- News
CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records
CyberXero combined Claude Code, PentAGI, and Cobalt Strike to steal 628,000+ Ukrainian records and probe national energy infrastructure.
- News
Yandex Confirms Service Outage as Drone Strikes Disable Three Data Centers
Drone strikes on three Yandex data centers cut Russian cloud connectivity to roughly 30%, knocking out storage, payments, and dozens of services.
- News
Russian APT Star Blizzard Uses 'RedFlick' Infection Chain in Recent Attacks
FSB-linked Star Blizzard shifted to a 'RedFlick' infection chain, hitting 100+ Ukraine-linked orgs since January to deploy the CosmicPulse backdoor.
- News
Russia's Star Blizzard Ditches ClickFix to Widen Phishing Net
FSB-linked Star Blizzard dropped ClickFix for a one-click 'RedFlick' chain, expanding phishing beyond Ukraine to deploy its CosmicPulse backdoor.
- News
Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials
Ontinue details a four-stage Lunex Stealer chain abusing a vulnerable AMD driver to blind EDR, then steal browser and crypto-wallet data.
- News
Zelensky Appoints Former Police Chief to Lead Ukraine's Cyber Coordination Center
Ihor Klymenko, Ukraine's former police chief and interior minister, will lead the National Cybersecurity Coordination Center under Zelensky.
- News
Pro-Ukraine Hacking Cat Group Deploying New Malware Against Russian Targets
Kaspersky says pro-Ukraine hacktivist group Hacking Cat has moved from defacements to a RAT, ransomware, and a data-destroying wiper.
- News
Ukraine Shuts Down 94 Fraudulent Call Centers, Seizes Millions in Cash
Ukrainian authorities dismantled 94 fraud call centers running investment scams and bank credential theft operations across multiple cities.
- News
Ukraine Dismantles 94 Fraudulent Call Centers, Seizes $2M and a Kilogram of Gold
Ukraine's National Police and SBU shut down 94 investment fraud call centers across 9 regions, seizing $2M, luxury cars, and 5,200+ SIM cards.
- News
UAC-0145 Uses ClickFix CAPTCHAs to Deliver Malware to Ukrainian Devices
Russian state-sponsored threat actor UAC-0145 is deploying ClickFix-style fake CAPTCHA prompts to trick Ukrainian targets into self-installing...
- News
Gamaredon Expands Ukraine Attacks with New Malware and Cloud Abuse
Russian FSB-linked APT group Gamaredon has mounted 35 distinct spear-phishing campaigns against Ukrainian targets in 2025, deploying an expanded malware...
- News
Ukraine and FBI Expose Russian Intelligence Campaign Stealing Signal Credentials via Fake SMS
The SSU and FBI jointly disclosed a sustained Russian intelligence operation targeting messaging credentials of government officials, military personnel,...
- News
Russia Used Social Engineering to Breach Prominent Messaging Accounts, Ukraine Says
Ukraine's SBU and the FBI have jointly exposed a long-running Russian intelligence operation using fake tech-support workers to steal messaging app...
- News
Russian APT Deploys 'StockStay' Backdoor Against Ukrainian Targets
Turla, a prolific Russian state-sponsored threat actor, has deployed a previously undocumented backdoor dubbed 'StockStay' in espionage operations...
- News
Russian APT Gamaredon Upgrades Its Arsenal, Requiring New Defenses
ESET research reveals FSB-sponsored Gamaredon has significantly upgraded its C2 infrastructure obfuscation and malware delivery capabilities, running 35...
- News
Conti Ransomware Member Pleads Guilty, Faces Up to 20 Years in Prison
Oleksii Lytvynenko, a 44-year-old Ukrainian national, has pleaded guilty to participating in the prolific Conti ransomware group after being arrested in...
- News
Ghostwriter Targets Ukraine Government Entities with Prometheus Phishing Malware
The Belarus-aligned Ghostwriter APT (UAC-0057/UNC1151) has launched a new phishing campaign impersonating Prometheus, a Ukrainian e-learning platform, to...
- News
Ukraine Identifies Infostealer Operator Tied to 28,000
Ukrainian cyberpolice, working with US law enforcement, identified an 18-year-old from Odesa suspected of running an infostealer malware operation that...
- News
''FrostyNeighbor'' APT Carefully Targets Govt Orgs in Poland, Ukraine
A Belarusian nation-state threat group dubbed FrostyNeighbor is conducting a precise espionage campaign against government organizations in Poland and...
- News
Incomplete Windows Patch Opens Door to Zero-Click Attacks
A Microsoft Windows vulnerability originally patched in a prior Patch Tuesday was incompletely remediated, leaving a residual attack surface that...
- News
Ukraine Confirms APT28 Campaign Targeting Prosecutors and Anti-Corruption Agencies
Ukraine's CERT-UA has confirmed a suspected APT28 espionage campaign targeting Ukrainian prosecutors and anti-corruption agencies, exploiting Roundcube...
- News
APT28 Deploys PRISMEX Malware in Campaign Targeting Ukraine
Russian state-sponsored threat actor APT28 (Forest Blizzard / Pawn Storm) has launched a targeted spear-phishing campaign deploying a newly documented...
- News
CERT-UA Impersonation Campaign Spread AGEWHEEZE Malware to 1 Million Emails
Ukraine's Computer Emergency Response Team (CERT-UA) has disclosed a large-scale phishing campaign in which threat actor UAC-0255 impersonated the agency...
- News
Bearlyfy Hits Russian Firms with Custom GenieLocker
Pro-Ukrainian hacktivist group Bearlyfy has conducted over 70 cyberattacks against Russian companies since January 2025, recently deploying a custom...
- News
Pro-Ukraine Hacker Group Bearlyfy Targets Russian Companies
The pro-Ukrainian hacktivist group Bearlyfy has conducted over 70 cyberattacks against Russian businesses in the past year and is escalating operations...
- News
Spanish-Ukrainian Police Bust Gambling Ring That Exploited
Spanish and Ukrainian law enforcement dismantled a criminal organization that recruited war-displaced Ukrainian women to open bank accounts used to...
- News
APT28 Weaponizes Microsoft Office Zero-Day in 3 Days
Russia-linked APT28 (Fancy Bear) weaponized Microsoft Office CVE-2026-21509 within days of disclosure, deploying espionage implants against Ukrainian...
- News
Russian-Linked CANFAIL Malware Targets Ukrainian Defense
Google Threat Intelligence Group attributes a previously undocumented JavaScript malware called CANFAIL to a Russian-linked threat actor targeting...