Tag: ukr.net

1 Attack Reports | 0 Vulnerabilities

Attack reports

BlueDelta’s Persistent Campaign Against UKR.NET

Between June 2024 and April 2025, a sustained credential-harvesting campaign targeting UKR.NET users was identified, attributed to the Russian state-sponsored threat group BlueDelta. The group deployed multiple credential-harvesting pages themed as UKR.NET login portals, leveraging free web service…
phishing
ngrok
credential harvesting
russian threat actor
gru
2025-12-17
pdf lures
proxy tunneling
ukr.net
ukrainian targets
webmail compromise
Published: December 17, 2025
Downloadable IOCs: 23
Click here to see more Attack Reports