VERY IMPORTANT

Anomali Threat Research discovered a campaign targeting Ukrainian government officials with malicious files that could be repurposed to target government officials of other countries. Anomali assesses with high confidence that this activity was conducted by Russia-sponsored cyberespionage group Primitive Bear (Gamaredon). Primitive Bear was observed distributing .docx files that attempted to download a .dot file via remote templates.