A suspected Russian hybrid espionage and influence operation has been observed delivering a mix of Windows and Android malware to target the Ukrainian military under the Telegram persona Civil Defense.

Affected parties will be notified, and legal actions are currently in progress.

This blog covers how attackers can exploit this installation. Including tips on how to spot and stop them.