CERT-UA Uncovers New Malware Wave Distributing OCEANMAP, MASEPIE, STEELHOOK

The Computer Emergency Response Team of Ukraine (CERT-UA) has detected a new phishing campaign by the Russia-linked APT28 group. From December 15-25, 2023, the group targeted government entities with malware such as MASEPIE, OCEANMAP, and STEELHOOK through malicious email links. The malware is capable of harvesting sensitive information, executing commands, and moving laterally within an hour of initial compromise.