Cybercriminals mail out chemical attack warning phishing letters

Cybercriminals mail out chemical attack warning phishing letters

Ukrinform
Hackers are massively sending new emails allegedly warning recipients about an impending chemical attack. These letters contain malware stealing users’ data

That’s according to the State Service for Special Communications and Information Protection of Ukraine, Ukrinform reports.

The CERT-UA (Computer Emergency Response Team of Ukraine), operating under the State Special Communications Service, has revealed the fact of mass distribution of e-mails signed "chemical attack".

The emails contain a link to an XLS document with a macro that launches the JesterStealer malware damaging computers.

Read also: Phones, computers of Ukrainians targeted by Russian hackers

The CERT-UA explained that the files are downloaded from compromised web resources.

JesterStealer acquires authentication and other data from Internet browsers, MAIL/FTP/VPN clients, cryptocurrency wallets, password managers, messengers, game programs, etc.

The stolen data is then transmitted back to the attackers via Telegram. The malware self-deletes as soon as the malign operation is completed.

As reported by Ukrinform, the State Special Service said that the Russian invaders have been attempting to gain access to personal data and state registers through private computers and mobile phones.


Let’s get started read our news at facebook messenger > > > Click here for subscribe

While citing and using any materials on the Internet, links to the website ukrinform.net not lower than the first paragraph are mandatory. In addition, citing the translated materials of foreign media outlets is possible only if there is a link to the website ukrinform.net and to the website of a foreign media outlet. Citing and using materials in offline media, mobile apps, Smart TV are allowed only with written permission from Ukrinform. News and publications marked as "Advertisement" and "PR" and articles in the section "Releases" include promoted content, and an advertiser is responsible for the content.

© 2015-2022 Ukrinform. All rights reserved.

Website design Studio Laconica

Extended searchHide extended search
By period:
-