Ukraine Hackers Attacking Russian Aerospace Companies and Other Defence-Related Sectors

Ukraine-linked actors are running a targeted cyber-espionage campaign against Russian aerospace and defence suppliers and prime contractors, using spear-phishing lures (job offers, invites, contract updates) to deliver a small DLL loader that pulls a second-stage script and injects a final payload into trusted processes. The tailored malware includes modules for email scraping, document theft, credential capture, and a simple C2 command loop to switch between silent exfiltration and interactive shell access; persistence is maintained via scheduled tasks and hijacked update tools to minimize detection.