True Face of Civil Defense: Russian Espionage Group Targets Ukraine

Amber | Attack Report

UNC5812, suspected to be a Russian-led hybrid operation, has initiated a complex campaign leveraging its "Civil Defense" Telegram profile to deploy malware targeting the Ukrainian military. Through a website and a Telegram channel with over 80,000 followers, "Civil Defense" promotes free software it claims assists conscripts in tracking Ukrainian military recruiters.

Reduce real exposure. Not just vulnerability volume.