{"id":620845,"date":"2026-09-30T21:34:47","date_gmt":"2026-09-30T18:34:47","guid":{"rendered":"https:\/\/korabelov.info\/2026\/09\/620845\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\/"},"modified":"2026-09-30T21:34:50","modified_gmt":"2026-09-30T18:34:50","slug":"they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians","status":"publish","type":"post","link":"https:\/\/korabelov.info\/en\/2026\/09\/620845\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\/","title":{"rendered":"They fake websites and hide viruses in \"updates\": how hackers attack Ukrainians"},"content":{"rendered":"<p>Hackers are increasingly relying on deceiving Ukrainians: they copy familiar websites and pass off malicious files as ordinary documents or updates. According to the <strong>State Service for Special Communications and Information Protection<\/strong>, in the <strong>first half of 2026<\/strong> over <strong>88%<\/strong> of cyberattacks in <strong>Ukraine<\/strong> were related to malicious software, social engineering, infections, and system compromise. According to <a href=\"https:\/\/cip.gov.ua\/ua\/news\/maskuvannya-ta-socialna-inzheneriya-yak-zminilisya-taktiki-kiberzlochinciv\" rel=\"noopener\" target=\"_blank\">cip.gov.ua<\/a>.<\/p>\n<p><strong>One<\/strong> method of deception is creating websites that outwardly resemble resources of well-known institutions. Attackers imitate pages of <strong>CERT-UA<\/strong>, the document management systems of the <strong>Verkhovna Rada<\/strong> and the <strong>Brave1<\/strong> platform.<\/p>\n<p>Visitors to such a fake page are offered to install a &#8220;security update&#8221; or a &#8220;service module.&#8221; However, the downloaded file may contain a program that gives hackers remote access to the device.<\/p>\n<p>To disguise their actions, perpetrators also use legitimate online services. Archives with malicious content are hosted on well-known file-sharing sites and <strong>GitHub<\/strong>, and stolen data is transmitted using <strong>Telegram<\/strong> bots. The <strong>State Service for Special Communications and Information Protection<\/strong> explains: such attacks are harder to detect because the hackers&#8217; actions can resemble normal use of Internet services.<\/p>\n<p>In the distribution of cyberattacks provided by the agency, the largest shares were malicious software and social engineering:<\/p>\n<ul>\n<li>malicious software \u2014 <strong>33%<\/strong>;<\/li>\n<li>social engineering \u2014 <strong>31%<\/strong>;<\/li>\n<li>infection incidents \u2014 <strong>15%<\/strong>;<\/li>\n<li>system compromise \u2014 <strong>4.5%<\/strong>.<\/li>\n<\/ul>\n<p>Fake login pages and forged software update notifications are also used by the Russian hacker group <strong>Midnight Blizzard<\/strong>. Through hotel <strong>Wi-Fi<\/strong> networks it steals users&#8217; data and infects their devices with malicious software.<\/p>\n<p><a href=\"https:\/\/cip.gov.ua\/ua\/news\/maskuvannya-ta-socialna-inzheneriya-yak-zminilisya-taktiki-kiberzlochinciv\">Source<\/a><\/p>\n<p><!-- website-article-source:028b02eee074d55447e200dc --><\/p>\n<p><strong>Previously we wrote:<\/strong><\/p>\n<ul>\n<li><a href=\"https:\/\/korabelov.info\/en\/2026\/04\/583464\/clicking-a-link-in-a-social-benefit-advertisement-on-a-social-network-cost-a-woman-from-mykolaiv-nearly-uah-94-000\/\" rel=\"noopener\" target=\"_blank\">Following a link in a social media announcement about a social payment cost a Mykolaiv resident almost 94,000 UAH<\/a><\/li>\n<li><a href=\"https:\/\/korabelov.info\/2026\/01\/566823\/nova-shakhrajska-skhema-proty-pensioneriv-na-mykolaivshchyni\/\" rel=\"noopener\" target=\"_blank\">New scam targeting pensioners in the Mykolaiv region<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>\ud83d\udcf0 \u26a0\ufe0f A file supposedly containing a security update may give hackers remote access to your device. To trick users, they copy the CERT-UA website, the Verkhovna Rada's document management site, and Brave1.<\/p>\n<p>\ud83d\udd39 Infected archives are hidden on popular file-sharing services and GitHub, and stolen data is sent via Telegram bots. This way the attack can look like ordinary internet use.<\/p>\n","protected":false},"author":12394,"featured_media":620817,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","tstyn_error":"","tie_post_sub_title":"A routine download can allow attackers to gain access to your device"},"categories":[4615],"tags":[],"class_list":["post-620845","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-accidents"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.6 (Yoast SEO v28.6) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>They fake websites and hide viruses in &quot;updates&quot;: how hackers attack Ukrainians - \u041d\u043e\u0432\u043e\u0441\u0442\u0438 \u041d\u0438\u043a\u043e\u043b\u0430\u0435\u0432\u0430 c\u0435\u0433\u043e\u0434\u043d\u044f<\/title>\n<meta name=\"description\" content=\"\ud83d\udcf0 \u26a0\ufe0f A file supposedly containing a security update may give hackers remote access to your device. To trick users, they copy the CERT-UA website, the Verkhovna Rada&#039;s document management site, and Brave1. \ud83d\udd39 Infected archives are hidden on popular file-sharing services and GitHub, and stolen data is sent via Telegram bots. This way the attack can look like ordinary internet use. | \u041a\u043e\u0440\u0430\u0431\u0435\u043b\u043e\u0432.\u0418\u041d\u0424\u041e\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/korabelov.info\/en\/2026\/09\/620845\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"They fake websites and hide viruses in &quot;updates&quot;: how hackers attack Ukrainians\" \/>\n<meta property=\"og:description\" content=\"\ud83d\udcf0 \u26a0\ufe0f A file supposedly containing a security update may give hackers remote access to your device. To trick users, they copy the CERT-UA website, the Verkhovna Rada&#039;s document management site, and Brave1. \ud83d\udd39 Infected archives are hidden on popular file-sharing services and GitHub, and stolen data is sent via Telegram bots. This way the attack can look like ordinary internet use. | \u041a\u043e\u0440\u0430\u0431\u0435\u043b\u043e\u0432.\u0418\u041d\u0424\u041e\" \/>\n<meta property=\"og:url\" content=\"https:\/\/korabelov.info\/en\/2026\/09\/620845\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\/\" \/>\n<meta property=\"og:site_name\" content=\"\u041d\u043e\u0432\u043e\u0441\u0442\u0438 \u041d\u0438\u043a\u043e\u043b\u0430\u0435\u0432\u0430 c\u0435\u0433\u043e\u0434\u043d\u044f\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/korabelovinfo\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-30T18:34:47+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-30T18:34:50+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/korabelov.info\/wp-content\/uploads\/2026\/09\/news-22e3c7328d5b48651151a917-15c87afbc9f17511.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1500\" \/>\n\t<meta property=\"og:image:height\" content=\"844\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Modern\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Modern\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/korabelov.info\\\/en\\\/2026\\\/09\\\/620845\\\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/korabelov.info\\\/en\\\/2026\\\/09\\\/620845\\\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\\\/\"},\"author\":{\"name\":\"Modern\",\"@id\":\"https:\\\/\\\/korabelov.info\\\/en\\\/#\\\/schema\\\/person\\\/a56bea94f434cf219bea48ae0ad2db79\"},\"headline\":\"They fake websites and hide viruses in \\\"updates\\\": how hackers attack Ukrainians\",\"datePublished\":\"2026-09-30T18:34:47+00:00\",\"dateModified\":\"2026-09-30T18:34:50+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/korabelov.info\\\/en\\\/2026\\\/09\\\/620845\\\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\\\/\"},\"wordCount\":280,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/korabelov.info\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/korabelov.info\\\/en\\\/2026\\\/09\\\/620845\\\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/korabelov.info\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/news-22e3c7328d5b48651151a917-15c87afbc9f17511.jpg\",\"articleSection\":[\"Accidents\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/korabelov.info\\\/en\\\/2026\\\/09\\\/620845\\\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\\\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\\\/\\\/korabelov.info\\\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/korabelov.info\\\/en\\\/2026\\\/09\\\/620845\\\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\\\/\",\"url\":\"https:\\\/\\\/korabelov.info\\\/en\\\/2026\\\/09\\\/620845\\\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\\\/\",\"name\":\"They fake websites and hide viruses in \\\"updates\\\": how hackers attack Ukrainians - \u041d\u043e\u0432\u043e\u0441\u0442\u0438 \u041d\u0438\u043a\u043e\u043b\u0430\u0435\u0432\u0430 c\u0435\u0433\u043e\u0434\u043d\u044f\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/korabelov.info\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/korabelov.info\\\/en\\\/2026\\\/09\\\/620845\\\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/korabelov.info\\\/en\\\/2026\\\/09\\\/620845\\\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/korabelov.info\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/news-22e3c7328d5b48651151a917-15c87afbc9f17511.jpg\",\"datePublished\":\"2026-09-30T18:34:47+00:00\",\"dateModified\":\"2026-09-30T18:34:50+00:00\",\"description\":\"\ud83d\udcf0 \u26a0\ufe0f A file supposedly containing a security update may give hackers remote access to your device. To trick users, they copy the CERT-UA website, the Verkhovna Rada's document management site, and Brave1. \ud83d\udd39 Infected archives are hidden on popular file-sharing services and GitHub, and stolen data is sent via Telegram bots. This way the attack can look like ordinary internet use. | \u041a\u043e\u0440\u0430\u0431\u0435\u043b\u043e\u0432.\u0418\u041d\u0424\u041e\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/korabelov.info\\\/en\\\/2026\\\/09\\\/620845\\\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/korabelov.info\\\/en\\\/2026\\\/09\\\/620845\\\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/korabelov.info\\\/en\\\/2026\\\/09\\\/620845\\\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\\\/#primaryimage\",\"url\":\"https:\\\/\\\/korabelov.info\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/news-22e3c7328d5b48651151a917-15c87afbc9f17511.jpg\",\"contentUrl\":\"https:\\\/\\\/korabelov.info\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/news-22e3c7328d5b48651151a917-15c87afbc9f17511.jpg\",\"width\":1500,\"height\":844,\"caption\":\"\u041a\u0456\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0443\u043a\u0440\u0430\u0457\u043d\u0446\u0456\u0432 \u0447\u0435\u0440\u0435\u0437 \u043f\u0456\u0434\u0440\u043e\u0431\u043b\u0435\u043d\u0456 \u0441\u0430\u0439\u0442\u0438 \u0442\u0430 \u0448\u043a\u0456\u0434\u043b\u0438\u0432\u0456 \u0444\u0430\u0439\u043b\u0438\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/korabelov.info\\\/en\\\/2026\\\/09\\\/620845\\\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"korabelov.info\",\"item\":\"https:\\\/\\\/korabelov.info\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Accidents\",\"item\":\"https:\\\/\\\/korabelov.info\\\/en\\\/accidents\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"They fake websites and hide viruses in \\\"updates\\\": how hackers attack Ukrainians\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/korabelov.info\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/korabelov.info\\\/en\\\/\",\"name\":\"\u041d\u043e\u0432\u043e\u0441\u0442\u0438 \u041d\u0438\u043a\u043e\u043b\u0430\u0435\u0432\u0430 c\u0435\u0433\u043e\u0434\u043d\u044f\",\"description\":\"\u041d\u043e\u0432\u043e\u0441\u0442\u0438 \u041a\u043e\u0440\u0430\u0431\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0440\u0430\u0439\u043e\u043d\u0430 \u0433\u043e\u0440\u043e\u0434\u0430 \u041d\u0438\u043a\u043e\u043b\u0430\u0435\u0432\u0430\",\"publisher\":{\"@id\":\"https:\\\/\\\/korabelov.info\\\/en\\\/#organization\"},\"alternateName\":\"\u041a\u043e\u0440\u0430\u0431\u0435\u043b\u043e\u0432.\u0418\u041d\u0424\u041e\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/korabelov.info\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/korabelov.info\\\/en\\\/#organization\",\"name\":\"\u041a\u043e\u0440\u0430\u0431\u0435\u043b\u043e\u0432.\u0418\u041d\u0424\u041e\",\"url\":\"https:\\\/\\\/korabelov.info\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/korabelov.info\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/korabelov.info\\\/wp-content\\\/uploads\\\/2021\\\/09\\\/izobrazhenie_viber_2020-11-21_17-05-33.jpg\",\"contentUrl\":\"https:\\\/\\\/korabelov.info\\\/wp-content\\\/uploads\\\/2021\\\/09\\\/izobrazhenie_viber_2020-11-21_17-05-33.jpg\",\"width\":1001,\"height\":1001,\"caption\":\"\u041a\u043e\u0440\u0430\u0431\u0435\u043b\u043e\u0432.\u0418\u041d\u0424\u041e\"},\"image\":{\"@id\":\"https:\\\/\\\/korabelov.info\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/korabelovinfo\\\/\",\"https:\\\/\\\/www.instagram.com\\\/korabelov.info\\\/\",\"https:\\\/\\\/www.pinterest.com\\\/korabelov_info\\\/\"],\"publishingPrinciples\":\"https:\\\/\\\/korabelov.info\\\/privacy-policy\\\/\",\"ownershipFundingInfo\":\"https:\\\/\\\/korabelov.info\\\/pro-nas-kontaktna-informatsiia\\\/\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/korabelov.info\\\/en\\\/#\\\/schema\\\/person\\\/a56bea94f434cf219bea48ae0ad2db79\",\"name\":\"Modern\",\"url\":\"https:\\\/\\\/korabelov.info\\\/en\\\/author\\\/modern\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"They fake websites and hide viruses in \"updates\": how hackers attack Ukrainians - \u041d\u043e\u0432\u043e\u0441\u0442\u0438 \u041d\u0438\u043a\u043e\u043b\u0430\u0435\u0432\u0430 c\u0435\u0433\u043e\u0434\u043d\u044f","description":"\ud83d\udcf0 \u26a0\ufe0f A file supposedly containing a security update may give hackers remote access to your device. To trick users, they copy the CERT-UA website, the Verkhovna Rada's document management site, and Brave1. \ud83d\udd39 Infected archives are hidden on popular file-sharing services and GitHub, and stolen data is sent via Telegram bots. This way the attack can look like ordinary internet use. | \u041a\u043e\u0440\u0430\u0431\u0435\u043b\u043e\u0432.\u0418\u041d\u0424\u041e","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/korabelov.info\/en\/2026\/09\/620845\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\/","og_locale":"en_US","og_type":"article","og_title":"They fake websites and hide viruses in \"updates\": how hackers attack Ukrainians","og_description":"\ud83d\udcf0 \u26a0\ufe0f A file supposedly containing a security update may give hackers remote access to your device. To trick users, they copy the CERT-UA website, the Verkhovna Rada's document management site, and Brave1. \ud83d\udd39 Infected archives are hidden on popular file-sharing services and GitHub, and stolen data is sent via Telegram bots. This way the attack can look like ordinary internet use. | \u041a\u043e\u0440\u0430\u0431\u0435\u043b\u043e\u0432.\u0418\u041d\u0424\u041e","og_url":"https:\/\/korabelov.info\/en\/2026\/09\/620845\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\/","og_site_name":"\u041d\u043e\u0432\u043e\u0441\u0442\u0438 \u041d\u0438\u043a\u043e\u043b\u0430\u0435\u0432\u0430 c\u0435\u0433\u043e\u0434\u043d\u044f","article_publisher":"https:\/\/www.facebook.com\/korabelovinfo\/","article_published_time":"2026-09-30T18:34:47+00:00","article_modified_time":"2026-09-30T18:34:50+00:00","og_image":[{"width":1500,"height":844,"url":"https:\/\/korabelov.info\/wp-content\/uploads\/2026\/09\/news-22e3c7328d5b48651151a917-15c87afbc9f17511.jpg","type":"image\/jpeg"}],"author":"Modern","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Modern","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/korabelov.info\/en\/2026\/09\/620845\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\/#article","isPartOf":{"@id":"https:\/\/korabelov.info\/en\/2026\/09\/620845\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\/"},"author":{"name":"Modern","@id":"https:\/\/korabelov.info\/en\/#\/schema\/person\/a56bea94f434cf219bea48ae0ad2db79"},"headline":"They fake websites and hide viruses in \"updates\": how hackers attack Ukrainians","datePublished":"2026-09-30T18:34:47+00:00","dateModified":"2026-09-30T18:34:50+00:00","mainEntityOfPage":{"@id":"https:\/\/korabelov.info\/en\/2026\/09\/620845\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\/"},"wordCount":280,"commentCount":0,"publisher":{"@id":"https:\/\/korabelov.info\/en\/#organization"},"image":{"@id":"https:\/\/korabelov.info\/en\/2026\/09\/620845\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\/#primaryimage"},"thumbnailUrl":"https:\/\/korabelov.info\/wp-content\/uploads\/2026\/09\/news-22e3c7328d5b48651151a917-15c87afbc9f17511.jpg","articleSection":["Accidents"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/korabelov.info\/en\/2026\/09\/620845\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/korabelov.info\/#organization"}},{"@type":"WebPage","@id":"https:\/\/korabelov.info\/en\/2026\/09\/620845\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\/","url":"https:\/\/korabelov.info\/en\/2026\/09\/620845\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\/","name":"They fake websites and hide viruses in \"updates\": how hackers attack Ukrainians - \u041d\u043e\u0432\u043e\u0441\u0442\u0438 \u041d\u0438\u043a\u043e\u043b\u0430\u0435\u0432\u0430 c\u0435\u0433\u043e\u0434\u043d\u044f","isPartOf":{"@id":"https:\/\/korabelov.info\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/korabelov.info\/en\/2026\/09\/620845\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\/#primaryimage"},"image":{"@id":"https:\/\/korabelov.info\/en\/2026\/09\/620845\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\/#primaryimage"},"thumbnailUrl":"https:\/\/korabelov.info\/wp-content\/uploads\/2026\/09\/news-22e3c7328d5b48651151a917-15c87afbc9f17511.jpg","datePublished":"2026-09-30T18:34:47+00:00","dateModified":"2026-09-30T18:34:50+00:00","description":"\ud83d\udcf0 \u26a0\ufe0f A file supposedly containing a security update may give hackers remote access to your device. To trick users, they copy the CERT-UA website, the Verkhovna Rada's document management site, and Brave1. \ud83d\udd39 Infected archives are hidden on popular file-sharing services and GitHub, and stolen data is sent via Telegram bots. This way the attack can look like ordinary internet use. | \u041a\u043e\u0440\u0430\u0431\u0435\u043b\u043e\u0432.\u0418\u041d\u0424\u041e","breadcrumb":{"@id":"https:\/\/korabelov.info\/en\/2026\/09\/620845\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/korabelov.info\/en\/2026\/09\/620845\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/korabelov.info\/en\/2026\/09\/620845\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\/#primaryimage","url":"https:\/\/korabelov.info\/wp-content\/uploads\/2026\/09\/news-22e3c7328d5b48651151a917-15c87afbc9f17511.jpg","contentUrl":"https:\/\/korabelov.info\/wp-content\/uploads\/2026\/09\/news-22e3c7328d5b48651151a917-15c87afbc9f17511.jpg","width":1500,"height":844,"caption":"\u041a\u0456\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0443\u043a\u0440\u0430\u0457\u043d\u0446\u0456\u0432 \u0447\u0435\u0440\u0435\u0437 \u043f\u0456\u0434\u0440\u043e\u0431\u043b\u0435\u043d\u0456 \u0441\u0430\u0439\u0442\u0438 \u0442\u0430 \u0448\u043a\u0456\u0434\u043b\u0438\u0432\u0456 \u0444\u0430\u0439\u043b\u0438"},{"@type":"BreadcrumbList","@id":"https:\/\/korabelov.info\/en\/2026\/09\/620845\/they-fake-websites-and-hide-viruses-in-updates-how-hackers-attack-ukrainians\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"korabelov.info","item":"https:\/\/korabelov.info\/en\/"},{"@type":"ListItem","position":2,"name":"Accidents","item":"https:\/\/korabelov.info\/en\/accidents\/"},{"@type":"ListItem","position":3,"name":"They fake websites and hide viruses in \"updates\": how hackers attack Ukrainians"}]},{"@type":"WebSite","@id":"https:\/\/korabelov.info\/en\/#website","url":"https:\/\/korabelov.info\/en\/","name":"\u041d\u043e\u0432\u043e\u0441\u0442\u0438 \u041d\u0438\u043a\u043e\u043b\u0430\u0435\u0432\u0430 c\u0435\u0433\u043e\u0434\u043d\u044f","description":"\u041d\u043e\u0432\u043e\u0441\u0442\u0438 \u041a\u043e\u0440\u0430\u0431\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0440\u0430\u0439\u043e\u043d\u0430 \u0433\u043e\u0440\u043e\u0434\u0430 \u041d\u0438\u043a\u043e\u043b\u0430\u0435\u0432\u0430","publisher":{"@id":"https:\/\/korabelov.info\/en\/#organization"},"alternateName":"\u041a\u043e\u0440\u0430\u0431\u0435\u043b\u043e\u0432.\u0418\u041d\u0424\u041e","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/korabelov.info\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/korabelov.info\/en\/#organization","name":"\u041a\u043e\u0440\u0430\u0431\u0435\u043b\u043e\u0432.\u0418\u041d\u0424\u041e","url":"https:\/\/korabelov.info\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/korabelov.info\/en\/#\/schema\/logo\/image\/","url":"https:\/\/korabelov.info\/wp-content\/uploads\/2021\/09\/izobrazhenie_viber_2020-11-21_17-05-33.jpg","contentUrl":"https:\/\/korabelov.info\/wp-content\/uploads\/2021\/09\/izobrazhenie_viber_2020-11-21_17-05-33.jpg","width":1001,"height":1001,"caption":"\u041a\u043e\u0440\u0430\u0431\u0435\u043b\u043e\u0432.\u0418\u041d\u0424\u041e"},"image":{"@id":"https:\/\/korabelov.info\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/korabelovinfo\/","https:\/\/www.instagram.com\/korabelov.info\/","https:\/\/www.pinterest.com\/korabelov_info\/"],"publishingPrinciples":"https:\/\/korabelov.info\/privacy-policy\/","ownershipFundingInfo":"https:\/\/korabelov.info\/pro-nas-kontaktna-informatsiia\/"},{"@type":"Person","@id":"https:\/\/korabelov.info\/en\/#\/schema\/person\/a56bea94f434cf219bea48ae0ad2db79","name":"Modern","url":"https:\/\/korabelov.info\/en\/author\/modern\/"}]}},"wpml_current_locale":"en_US","wpml_translations":[],"_links":{"self":[{"href":"https:\/\/korabelov.info\/en\/wp-json\/wp\/v2\/posts\/620845","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/korabelov.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/korabelov.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/korabelov.info\/en\/wp-json\/wp\/v2\/users\/12394"}],"replies":[{"embeddable":true,"href":"https:\/\/korabelov.info\/en\/wp-json\/wp\/v2\/comments?post=620845"}],"version-history":[{"count":1,"href":"https:\/\/korabelov.info\/en\/wp-json\/wp\/v2\/posts\/620845\/revisions"}],"predecessor-version":[{"id":620847,"href":"https:\/\/korabelov.info\/en\/wp-json\/wp\/v2\/posts\/620845\/revisions\/620847"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/korabelov.info\/en\/wp-json\/wp\/v2\/media\/620817"}],"wp:attachment":[{"href":"https:\/\/korabelov.info\/en\/wp-json\/wp\/v2\/media?parent=620845"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/korabelov.info\/en\/wp-json\/wp\/v2\/categories?post=620845"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/korabelov.info\/en\/wp-json\/wp\/v2\/tags?post=620845"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}