NSDC spoke about the massive cyber attack against Ukrainians

On a page that mimicked the Ministry of Health website, users were asked to download a file, supposedly with data on vaccines. As a result, the attackers gained control of the victims’ computers.

The NSDC reported on a massive cyber attack against Ukrainian users in late January. The attackers took advantage of the hype surrounding coronavirus vaccines and gained access to their victims’ computers. This was announced on Friday, February 12, by the press service of the National Security and Defense Council.

It is noted that during the attack, a web page was created on a popular host that mimicked the website of the Ministry of Health of Ukraine. It was registered in several domains that mimicked the official moz.gov.ua.

The fake page published information about the alleged start of mandatory vaccination against COVID-19 as of January 25. Users were asked to download a file with details. As it turned out, the hackers embedded malicious code (macros) into the document, which, when opened, launched a script that provides remote control of the infected computer.

The National Cybersecurity Coordination Center, together with CSIRT-NBU and CERT-UA, blocked phishing domains: moz-gov-ua.com, moz-govua.com and mozgovua.com.

It was previously reported that a Ukrainian in the United States was sentenced to seven years for millions of robberies on the Internet.

And yesterday it emerged that the logins and passwords of billions of Gmail users were leaked onto the Internet.

News of Correspondent.net on Telegram. Subscribe to our channel https://t.me/korrespondentnet