Targeting Politicians in Ukraine and U.S.-Based Healthcare Providing Aid to Refugees from Ukraine

The RomCom threat actor is targeting Ukrainian politicians and a U.S.-based healthcare company providing aid to Ukrainian refugees. The BlackBerry Threat Research and Intelligence team’s report reveals RomCom’s use of trojanized applications, spear phishing and cloned websites in its attacks. The actors follow global developments surrounding the Ukraine crisis, and future content will detail RomCom’s behaviour and detection engineering.