UKRAINE'S ARMY TARGETED IN NEW CHARITY-THEMED MALWARE CAMPAIGN

Summary from the TLDR InfoSec newsletter

CERT-UA reported that the suspected Russian threat group Void Blizzard targeted Ukrainian Defense Forces officials via Signal and WhatsApp with charity-themed lures delivering the PluggyApe backdoor, which now features MQTT-based C2 communication and dynamic address retrieval from paste sites.