Ukraine's army targeted in new charity-themed malware campaign

Hey team, heads up on a new campaign targeting Ukrainian Defense Forces.

Ukrainian Defense Forces officials are currently being targeted in a new charity-themed malware campaign delivering a backdoor known as PluggyApe.

Technical Breakdown:

• Target: Officials within Ukraine's Defense Forces.
• Methodology: Social engineering leveraging a "charity-themed" lure.
• Payload: Backdoor malware identified as PluggyApe.
• Timeline: Campaign observed between October and December 2025.
  • (Note: The original summary specifies activity in 2025.)
• (Specific TTPs, IOCs, or detailed affected versions are not provided in this initial summary.)

Defense: Given the social engineering aspect, robust user awareness training against phishing and suspicious charitable requests is critical. Organizations should also ensure endpoint detection and response (EDR) solutions are configured to detect novel backdoor activity.

Source: https://www.bleepingcomputer.com/news/security/ukraines-army-targeted-in-new-charity-themed-malware-campaign/