Cyber ​​attacks of the UAC-0010 group (Armageddon) using the malicious program GammaLoad.PS1_v2

The government computer emergency response team of Ukraine CERT-UA discovered the fact of mass distribution of e-mails with the topics "Information bulletin", "Combat order", including, apparently, from the National Academy of Security of Ukraine. At the same time, e-mails are sent to private e-mail addresses of the objects of the attack.

REFERENCE: https://cert.gov.ua/article/971405

TAGS: UAC-0010, Armageddon, GammaLoad, massive e-mails, phishing

ATT&CK IDS: T1193 - Spearphishing Attachment, T1087.003 - Email Account, T1204.002 - Malicious File, T1036 - Masquerading, T1059.001 - PowerShell, T1059 - Command and Scripting Interpreter

Read More:

https://otx.alienvault.com/pulse/62e10e5dd2186c215831342c