Cyber attack on state organizations of Ukraine using the malicious program Cobalt Strike Beacon and exploits to vulnerabilities CVE-2021-40444 and CVE-2022-30190
released on 2022-06-06 @ 08:14:23 AM
The government team for responding to computer emergencies in Ukraine CERT-UA found the file "changes in wages with accruals.docx", which was distributed among state organizations of Ukraine by e-mail.
It was found that the document contains a link to an external object (HTML file containing JavaScript code), the execution of which, after exploiting vulnerabilities CVE-2021-40444 and CVE-2022-30190, will run the PowerShell command, download the EXE file "ms-msdt.exe" and damage your computer with the malicious program Cobalt Strike Beacon.