Hackers hit Ukrainian state agencies, critical infrastructure with new ‘Wrecksteel’ malware

Summary: In March, Ukraine experienced at least three cyberattacks targeting government agencies and critical infrastructure, utilizing a new malware known as Wrecksteel. The attacks involved phishing emails that led to the extraction of sensitive data and screenshots from infected devices. Ukrainian cyber authorities linked these activities to a newly identified hacking group, UAC-0219, while also suggesting potential ties to Russian-backed cyber operations.

Affected: Ukrainian government agencies and critical infrastructure

Keypoints :

• At least three cyberattacks recorded in March using new spying malware, Wrecksteel.
• Phishing emails with links to public file-sharing services delivered the malware, facilitating data extraction.
• Ukrainian authorities suspect Russian involvement, given the nature of previous similar cyber operations.