Attack trend alert: Email scams targeting donations to Ukraine

This report analyzes phishing campaigns exploiting the Russia–Ukraine crisis to solicit fraudulent cryptocurrency donations and sell fake charitable apparel, highlighting examples of deceptive sender addresses, an Ethereum public wallet with no transaction history, phishing domains (including .xyz) and redirects to malicious storefronts. It instructs investigators and end users to verify public wallet histories, check sender and domain reputations with tools like blockchain explorers and URL reputation services, hover over links before clicking, report suspicious emails, and maintain security awareness training and email gateway protections.