The State Service for Special Communications and Information Protection reported in the Telegram about the mass mailing of phishing letters to the e-mail addresses of the Ukrainian military on the i.ua and meta.ua services.
The targets of the attack are private mailboxes of the Ukrainian military and related persons. After the account is compromised, all available mail is downloaded via IMAP. The ministry said that the enemy also uses existing contact addresses for further mailings.
Ministry
In the text of the letter, the hackers inform that the mailbox will be blocked for two days and ask to follow the link to confirm the credentials.
According to the State Special Communications Service, these actions are carried out by the so-called "UNC1151" group located in Minsk. It consists of the Ministry of Defense of the Republic of Belarus staff officers.