Ukraine CERT-UA: Compromised Email Address Used To Deliver Malware Variants
An adversary was discovered using a compromised e-mail address to send phishing emails with a malicious PDF attachment.
The files used in the attack were protected by VMProtect to hinder analysis.
Successful intrusions resulted in systems infected with variants from the RomCom, FateGrab, and StealDeal malware families.
Featured Resources
View More Resources
blog
CVE-2026-32196: One-Click RCE via Windows Admin Center Control Flow Hijacking
Ilan Kalendarov, Security Research Team LeadBen Zamir, Security ResearcherElad Beber, Security ResearcherRuben Enkaoua, Security Researcher Cymulate Research Labs identified a set of
Webinar
Cymulate Stories: A Fireside Chat with Morgan Street Holdings
Many organizations still manage cyber risk using reactive security practices that struggle to keep pace with today’s threat landscape. As
blog
The Race to Ship AI Tools Left Security Behind. Part 1: Sandbox Escape
AI tools shipped fast - but weak sandboxing left escape paths, exposing systems to data access, abuse, and full compromise.