Ukraine CERT: Mass Phishing Campaign Poses as Nation's Security Service

CERT-UA discovered a mass email campaign impersonating the Security Service (SSU) that lures recipients to download a Document.zip which installs an MSI that launches ANONVNC remote-access malware; more than 100 central and local government devices were identified as affected and the activity is tracked as UAC-0198 while CERT-UA works to mitigate the threat.