Security News > 2022 > December > Trojaned Windows Installer Targets Ukraine

Mandiant is reporting on a trojaned Windows installer that targets Ukrainian users.

Mandiant uncovered a socially engineered supply chain operation focused on Ukrainian government entities that leveraged trojanized ISO files masquerading as legitimate Windows 10 Operating System installers.

The trojanized ISOs were hosted on Ukrainian- and Russian-language torrent file sharing sites.

Upon installation of the compromised software, the malware gathers information on the compromised system and exfiltrates it.

At a subset of victims, additional tools are deployed to enable further intelligence gathering.

One obvious solution would be for Microsoft to give the Ukrainians Windows licenses, so they don't have to get their software from sketchy torrent sites.

News URL

https://www.schneier.com/blog/archives/2022/12/trojaned-windows-installer-targets-ukraine.html