Apr 17 – Apr 23 Ukraine – Russia the silent cyber conflict

This post provides a timeline of the events related to the Russian invasion of Ukraine from the cyber security perspective.

Below is the timeline of the events related to the ongoing invasion that occurred in the previous weeks:

April 23 – Phishing attacks using the topic “Azovstal” targets Ukrainian entities

Ukrainian CERT-UA warns of phishing attacks on Ukrainian state organizations using the topic “Azovstal” and Cobalt Strike Beacon.

April 21 – US, Australia, Canada, New Zealand, and the UK warn of Russia-linked threat actors’ attacks

Cybersecurity agencies of the Five Eyes intelligence alliance warn of cyberattacks conducted by Russia-linked threat actors on critical infrastructure.

April 20 – Russian Gamaredon APT continues to target Ukrainian entities

Russia-linked threat actor Gamaredon targets Ukrainian entities with new variants of the custom Pterodo backdoor.

April 20 – Anonymous hacked other Russian organizations, some of the breaches could be severe

The Anonymous collective and affiliate groups intensify their attacks and claimed to have breached multiple organizations.

Please vote for Security Affairs as the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS
Vote for me in the sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog” and others of your choice.
To nominate, please visit: https://docs.google.com/forms/d/e/1FAIpQLSfxxrxICiMZ9QM9iiPuMQIC-IoM-NpQMOsFZnJXrBQRYJGCOw/viewform  

Follow me on Twitter: @securityaffairs and Facebook

Pierluigi Paganini

(SecurityAffairs – hacking, Russia conflict)