Attempted cyberattacks on military systems using mobile malware

Tags

External References

• https://cert.gov.ua/
• https://otx.alienvault.com/

Description

The report details attempts by threat actors to compromise smartphones and tablets belonging to military personnel by distributing malicious APK files disguised as legitimate software for military systems like GRISELDA and "Eyes". The malware, named HYDRA and a modified version of "Eyes", was designed to steal authentication data, GPS coordinates, and other sensitive information. The report emphasizes the importance of mobile device security and provides indicators of compromise, including file hashes, email addresses, IP addresses, and domain names associated with the attacks. It also highlights the collaboration between various Ukrainian cybersecurity teams in detecting and analyzing these incidents.

Date