Cyber police warn of massive “virus” attack on public institutions and private companies
Attackers distribute malware that establishes remote hidden access to a user's computer and sends documents to servers controlled by them.
Hackers on email mailboxes send letters purportedly on behalf of government agencies that have context like, “you didn't pay taxes. Details in the file...”, “a criminal case has been filed against you. Details in the application...” Infection of the equipment occurs when the user downloads the archive in the application letter. The principle of operation is to download the virus to the user's computer to create remote hidden access and send documents with the extension .doc, .docx, .rtf, etc. to the servers of attackers.
We know about the facts of distribution of such letters using the allegedly e-mail box of the Kyiv Patrol Police Department — [email protected].
Recommendations:
- Do not download encrypted archives or archives from the Internet under a password. If necessary, contact the sender to clarify whether the fact of sending the letter with the attachment was made. It is better to block the receipt of such files by e-mail altogether;
- before opening attachments in emails or messages, pay attention to the details. It is better to refrain from downloading attachments of emails from dubious senders. It should also alert if the author has changed the language of communication for unknown reasons, the subject of the letter is atypical for the author, as well as messages that encourage you to follow suspicious links or open suspicious files;
- limit the ability to run executable files; - periodically check the system with antivirus and update the signature databases; - use licensed operating systems and other software that is periodically updated; - regularly back up important files;
-
update access passwords to important systems as often as possible and use two-factor authentication.
If you are affected by the said offense, please contact the cyber police via the feedback form https://ticket.cyberpolice.gov.ua/ or by phone: 0800 50 51 70.
Cyber Police Department of the National Police of Ukraine
