"Russian APTs Furiously Phish Ukraine – Google"

Researchers at Google's Threat Analysis Group (TAG) stated that while Russia is fighting a physical war on the ground against Ukraine, advanced persistent threat (APT) groups affiliated with or backing Vladimir Putin's government are ramping up phishing and other attacks against Ukrainian and European targets in cyberspace.  The researchers have seen an increase in activity ranging "from espionage to phishing campaigns" from threat groups known as FancyBear/APT28 and Ghostwriter/UNC1151.  FancyBear has been attributed to Russia's GRU intelligence agency, and Ghostwriter has been attributed to the Belarusian Ministry of Defense.  According to researchers, China's Mustang Panda also has joined the fray, using the war in Ukraine to target European entities with lures related to the Ukrainian invasion in a recent phishing campaign.  The researchers have also seen a recent uptick of distributed denial-of-service (DDoS) attacks against Ukrainian government sites, such as the Ministry of Foreign Affairs and the Ministry of Internal Affairs, as well as key services that help Ukrainians find information, such as Liveuamap.  The researchers stated that they were sharing this information to help raise awareness among the security community and high risk users.

Threatpost reports: "Russian APTs Furiously Phish Ukraine – Google"