logo

Hackers impersonate Ukraine’s CERT to trick people into allowing computer access

ID: 3624ad84-a8fe-5607-a5dd-5b1458cc3b89

STIX ID: report--3624ad84-a8fe-5607-a5dd-5b1458cc3b89

Feed Name: The Record from Recorded Future News

Threat Score
60/100

Date Published: 2025-01-21

Date Updated: 2026-05-01

...
...

Ukrainian researchers and CERT-UA reported a campaign where attackers impersonated CERT-UA tech support and used AnyDesk remote desktop requests—claiming to perform "security audits"—to gain unauthorized remote access, likely leveraging previously compromised AnyDesk identifiers; the activity is tied to a broader rise in Russian-affiliated cyber operations against Ukrainian targets.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.