Ukraine Faces New Wave of Cyberattacks Disguised as Power Outage Schedules.

Fresh Cyber Campaign Targets Ukrainian Citizens

According to TSN.ua: Ukraine's state-owned power grid operator, NPC Ukrenergo, has issued a warning about a new wave of malicious email campaigns. Attackers are impersonating official energy company communications to distribute malware. This tactic exploits public concern over electricity supply, a critical issue since Russia's full-scale invasion began in 2022, by disguising the attacks as messages containing power outage schedules.

Deceptive Email Subjects and Sources

The phishing emails use compelling subject lines related to power restrictions, including:

• "Power Outage Schedule from February 24 to 28"
• "Updated Restriction Schedule"

Crucially, these emails originate from the fraudulent address [email protected]. The legitimate addresses for NPC Ukrenergo's official correspondence are [email protected] and [email protected]. Opening any attached files could lead to the theft of passwords and sensitive banking information.

"NPC Ukrenergo emphasizes that the company never sends outage schedules via personal messages or email." - NPC Ukrenergo

In response, energy experts strongly advise against downloading any attachments or clicking on links contained in such emails. If you receive a suspicious message, delete it immediately. If you have already opened a file, you should urgently scan your device with updated antivirus software. Authoritative information on power restrictions is published exclusively on NPC Ukrenergo's official social media pages.

These attacks underscore the heightened need for vigilance amid escalating cyber threats, particularly against critical national infrastructure like the energy grid. NPC Ukrenergo urges citizens to remain alert and verify the source of all information to avoid falling victim to these malicious traps. Adhering to expert recommendations is essential for protecting personal data and digital security.