State Special Communications Service warns of phishing attack on state structures disguised as DTEK

Circulation of malicious emails among state bodies

The State Service of Special Communications and Information Protection of Ukraine (State Special Communications Service) has issued a warning regarding a new hacker campaign. Malicious actors are attempting to gain unauthorised access to state institution systems by sending them phishing messages that formally originate from the company "DTEK".

Attack mechanism

According to information from the State Special Communications Service, the objective of these actions is to install software on the work computers of civil servants that enables remote control of devices. The primary tool of the attack is a PDF file attached to the email. The document contains a link presented as an opportunity to "pay off a debt".

If a user clicks on this link, a remote control program is installed on their computer.