Hackers impersonate Ukraine’s CERT to trick people into allowing computer access

Summary: Ukrainian researchers have uncovered a cyber campaign where attackers impersonate tech support from CERT-UA to gain unauthorized access to victims’ devices. Utilizing AnyDesk, a legitimate remote desktop software, the intruders claim to conduct “security audits” to exploit trust and authority. The campaign highlights the growing number of cyberattacks targeting Ukraine, with a significant increase in incidents reported over the past year.

Threat Actor: Unknown | unknown
Victim: Various individuals and organizations | Ukrainian victims

Keypoints :

• Attackers used social engineering tactics, posing as tech support from CERT-UA.
• Remote access was established via AnyDesk, claiming to conduct a “security audit.”
• Over the past year, CERT-UA reported a 70% increase in cyber incidents, with over 4,300 detected.