On October 30, 2026, the State Service of Special Communications and Information Protection of Ukraine (SSSCIP) reported a new wave of cyberattacks carried out by the Russian group UAC-0050. The attackers are sending phishing emails, disguising them as messages from the DTEK company, with the aim of gaining remote access to the computers of government institutions.
Nature of the Cyberattack
The hackers employ social engineering tactics by sending emails that claim there is an outstanding debt for electricity. The emails contain PDF files with links, and clicking on these links initiates the download of malicious archives. Once these files are opened, a program is silently installed on the victim's computer, granting hackers full access to the device.
Warnings from Experts
Experts from CERT-UA urge the public and government employees to exercise caution. They recommend:
- Not opening suspicious attachments;
- Not clicking on unknown links;
- Not entering passwords to unpack unfamiliar archives.
These simple measures can significantly reduce the risk of computers being infected with malicious software.
Conclusion
Cyberattacks on Ukrainian government institutions continue to pose a serious threat. The attackers use various methods to achieve their goals, making it essential to remain vigilant and follow expert recommendations to protect information.