logo

Decade-old malware haunts Ukrainian police 

ID: bdb77f1b-4b12-5f16-82ce-a05d10ddb078

STIX ID: report--bdb77f1b-4b12-5f16-82ce-a05d10ddb078

Feed Name: CyberScoop

Threat Score
60/100

Date Published: 2024-04-17

Date Updated: 2026-04-21

Author: AJ Vicens

...
...

Researchers discovered more than 100 Ukrainian government and police .doc files infected with the 2015-era OfflRouter virus, which delivers a payload (ctrlpanel.exe), weakens Word security, and spreads via laced documents and removable media; the persistence of the malware across years likely caused inadvertent uploads of sensitive documents to VirusTotal and highlights a localized, ongoing risk to Ukrainian entities.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.