The Ministry of Energy of Ukraine announced a phishing email campaign in which attackers impersonate the agency and encourage recipients to make a payment or download an attachment.
The Ministry of Energy of Ukraine announced a phishing email campaign in which attackers impersonate the agency and encourage recipients to make a payment or download an attachment.
According to the Ministry of Energy’s Telegram channel, the detected emails contain payment demands and attached files or links to download them. The ministry emphasized that they do not send such mailings, and therefore any «bills» or requests to pay something on behalf of the Ministry of Energy are a sign of fraud.
The department also warned that the attachments may contain malicious software. Opening them poses a risk of unauthorized access to computers and data, including corporate documents, mail, and accounts. The Ministry of Energy urges not to open files, follow links from such messages, and not make any payments.
For companies, this is a typical «sender spoofing» scenario: the recipient is sent a letter that visually resembles an official communication, and then prompted to take action that either triggers an infection or leads to a fake page to steal data or money. In such cases, experts advise checking the sender’s address, domain, signature, and account details, as well as verifying the information with the institution’s official channels.
Phishing campaigns involving «accounts» and investments regularly target government agencies and businesses, as a single click on a file can give attackers a point of entry into an organization’s network. Therefore, warnings from government agencies usually mean that an attack is already widespread and can affect both private users and companies that interact with the energy sector.
Previously, dev.ua wrote about how Nova Poshta reported a fraudulent mailing via SMS.
