Pro-Russian hackers pose as Ukraine's cyber agency to target government, businesses

A pro‑Russian actor allegedly operating as CyberSerp impersonated Ukraine’s CERT‑UA in a phishing campaign delivering a remote administration tool called AgeWheeze via a password‑protected archive; the malware enables extensive remote control capabilities. Targets included government, medical, financial, security, academic, and software development organizations, but CERT‑UA says infections were limited mainly to personal devices at educational institutions and larger impact claims by the group remain unverified.