Threat Post - Malware Posing as Russia DDoS Tool Bites Pro-Ukraine Hackers

https://threatpost.com/malware-posing-russia-ddos-tool-bites-pro-ukraine-hackers/178864/

According to Cisco Talos, a denial of service (DDoS) tool intended to attack Russian websites was provided by the threat actor via Telegram.

Instead, however, evidence suggests that the malware was distributed in the form of an infostealer that stole information and sent it to Russian IP addresses.

Despite the fact that there are indeed "disBalancer" groups distributing "legitimate" DDoS attack tools to wage cyberwar against "Russian propaganda websites."

Such malware is just one example of cybercriminals using invasion for social engineering and exploiting sympathizers on both sides.

Beware of such disguised malware!