Ukraine Government Sector Targeted With The DolphinCape Information Stealer
The government sector of Ukraine was targeted with spear-phishing emails with a malicious attachment which appeared to be sent from the State Emergency Service of Ukraine.
Opening the attachment resulted in VBScript code creating a scheduled task for persistence and a PowerShell script downloading the DolphinCape information stealer.
The malicious software is capable of exfiltrating system information as well as screenshots of the infected device.
Featured Resources
View More Resources
Post-Mythos Security: When Exploits Outpace the Patch Cycle
Avihai Ben Yossef, Co-Founder & CTO Security teams have always lived with more vulnerabilities than they could fix. That is
When Monitored Content Strikes Back: Account Takeover in Microsoft Purview
Cymulate found a stored XSS flaw in Microsoft Purview that exposed reviewer tokens and enabled privileged account takeover.
Cymulate Launches MCP Server and Claude Plugin
How Cymulate transforms exposure validation from a destination platform into an AI-native security capability Security teams have more data than ever before, but