WRECKSTEEL Campaign Uses Fake HR Emails to Spy on Ukrainian Government Systems

The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert about a sophisticated cyberattack campaign actively targeting Ukrainian government agencies and other critical infrastructure since 2024.

The attackers behind this campaign, tracked as UAC-0219, have deployed a stealer tool known as WRECKSTEEL, using phishing lures and publicly hosted scripts to steal data and screenshots from compromised computers.

Social Engineering Leads the Charge

According to CERT-UA, the at