Hackers, likely linked to the Russian group Sandworm, are trying to get to the computers of users of the Army+ app. Here’s what you need to know about the attackers' actions to avoid getting infected with malware.
Hackers, likely linked to the Russian group Sandworm, are trying to get to the computers of users of the Army+ app. Here’s what you need to know about the attackers' actions to avoid getting infected with malware.
CERT-UA cyber experts have received information about an active cyberattack targeting Army+ users. The attackers have created a number of fake websites that mimic the official page of the application.
CERT-UA is tracking this hostile activity under the identifier UAC-0125. There is good reason to believe that this attack is related to the well-known hacker group UAC-0002 (Sandworm), which has previously carried out similar attacks. In the first half of 2024, they used Trojan files disguised as Microsoft Office programs to infect computers.
