Russia's APT28 targets Ukraine government with bogus Windows updates

The Kremlin-backed threat group APT28 is flooding Ukrainian government agencies with email messages about bogus Windows updates in the hope of dropping malware that will exfiltrate system data. According to the Computer Emergency Response Team of Ukraine (CERT-UA), the advanced persistent threat (APT) group – which also is …

[Winkypop]

A Microsoft spokesman said in response

“Hey, that’s our job!”

[Anonymous Coward]

Yeah we should be using encrypted stuff like Whatsapp. You never get malware there.

[Tron]

At least the Russian update didn't break printing.

-The messages appeared to have been sent by system administrators of government agencies.

A lousy plan. No sane person would follow tech advice from a government agency.

[Roland6]

I wonder who’s email scanning service the Ukrainian government are using…

We would hope it isn’t Russian and that UK/US security experts (working in both government agencies and commercial sector) are getting sight of the bogus messages.