Distribution of SmokeLoader Targeting Ukrainian Government and Companies

AhnLab SEcurity intelligence Center (ASEC) discovered that multiple SmokeLoader malware strains are being distributed to the Ukrainian Government and companies. It seems that the number of attacks targeting Ukraine has increased recently. The targets confirmed so far include the Ukrainian Department of Justice, public institutions, insurance companies, medical institutions, construction companies, and manufacturing companies.

The distributed email follows the format shown in Figure 1 written in Ukrainian. The body included information related to an invoice, prompting the reader to execute …

ahnlab asec attacks center companies construction department department of justice distributed distribution far government institutions insurance intelligence justice malware malware analysis medical public security security intelligence smokeloader targeting ukraine ukrainian