Skip to content
Russian Hackers Launch Phishing Campaign Against Ukrainian Government

Russian Hackers Launch Phishing Campaign Against Ukrainian Government

First seen 30 Oct 2026, 18:46 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 30, 2026 at 20:46 UTC
  • •Russian hackers are impersonating DTEK to target Ukrainian government agencies.
  • •Phishing emails contain malicious links that install software for remote access.
  • •Authorities warn of increased cyberattack activity against Ukraine.

Ukrainian government institutions are under attack from Russian hackers using phishing emails disguised as communications from DTEK, an energy company. The emails claim to address electricity debts and include malicious PDF attachments. Clicking on these links can lead to the installation of software that grants hackers remote access to victims' computers. The State Service of Special Communications and Information Protection of Ukraine has issued warnings about this cyberattack. The scale of the attack appears significant, targeting multiple government agencies. Victims are advised to verify information through official channels to avoid falling for the scam. The attack is part of ongoing cyber operations attributed to Russian threat actors.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-30
Phishing campaign reported
Ukrainian government institutions alerted to phishing emails claiming to be from DTEK regarding electricity debts.
Ground.News
2026-10-30
State Service issues warning
The State Service of Special Communications and Information Protection of Ukraine warns citizens about the phishing scheme.
knews.media

More articles in this cluster (4)

Following this threat?

Track UAC-0050 Group and DTEK in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (9)

1 / 3

Common questions

What should I do if I receive a suspicious email?
Do not click on any links or download attachments; verify the email's authenticity through official channels.
How widespread is this phishing campaign?
The campaign appears to target multiple Ukrainian government institutions, indicating a broad scope.
What are the signs of a phishing email?
Look for poor grammar, urgent requests for payment, and unfamiliar sender addresses as common indicators.