Ukrainian emergency services and hospitals hit by espionage campaign using new AgingFly malware

Researchers and CERT-UA observed an active espionage campaign by a group tracked as UAC-0247 that used phishing lures and malicious archives to deliver multiple malware tools (AgingFly, SilentLoop, ChromeElevator, ZapixDesk) against Ukrainian hospitals, local government and emergency services to achieve remote access, credential theft, data collection and in some cases to mine cryptocurrency; the report also notes a separate Russia-linked APT28 campaign targeting prosecutors and investigators in Ukraine and neighboring countries.