Russia Kneecaps Ukraine Army Recruitment With Spoofed 'Civil Defense' App
ID: 9ef8083e-518a-52a9-8b0f-ea939a9518c3
STIX ID: report--9ef8083e-518a-52a9-8b0f-ea939a9518c3
Feed Name: Dark Reading
Threat Score
Date Published: 2024-10-28
Date Updated: 2026-04-21
Author: Becky Bracken, Senior Editor, Dark Reading
...
...
Google TAG and Mandiant analysts uncovered a Kremlin-linked campaign (UNC5812) that lures potential Ukrainian recruits to a spoofed “Civil Defense” site and Telegram channel to distribute Windows and Android malware (Pronsis Loader → Sunspinner & Purestealer on Windows; Craxsrat and Sunspinner on Android) while simultaneously disseminating anti-mobilization disinformation to suppress recruitment efforts.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.