Hacker group UAC-0185 attempts to attack Ukrainian defense enterprises

Ukraine's State Service for Special Communications and Information Protection reported the information.

According to the report, the attacks began with phishing emails disguised as official messages from the Ukrainian Union of Industrialists and Entrepreneurs.

The emails included an invitation to a conference held on December 5 in Kyiv, where discussions focused on transitioning defense industry enterprises to NATO standards.

The emails contained a link to "angebio22." Clicking on the link could unintentionally infect users' computers with malicious software.

The State Service of Special Communications noted that these attacks were carried out by the UAC-0185 group, which has been actively operating since 2022. The hackers focus on stealing credentials from popular messengers such as Signal, Telegram, and WhatsApp, as well as military systems. Less frequently, they attempt to gain unauthorized access to the computers of defense enterprise employees.

• On the occasion of the Day of Special Forces of the Russian Armed Forces, which was celebrated in Russia on October 24, Ukrainian hackers hit the websites of 13 companies.