Skip to content

Event

Hackers target Ukrainian websites to spread malicious software Psychedelic

  • Earliest collected report:dev.ua

Hackers launched a large-scale cyberattack on Ukrainian websites using fake Cloudflare verification. The attack aims to spread the spyware Psychedelic Stealer, which steals passwords and cryptocurrency wallets.

In brief

  • Hackers compromised Ukrainian websites to spread malicious software.
  • The attack is disguised as fake Cloudflare verification.
  • The malicious software Psychedelic Stealer steals passwords and cryptocurrency wallets.
  • Criminals use social engineering tactics known as ClickFix.
  • Affected sites include clinics, online stores, and other businesses.
Covered by 2 of 6 media groups
  • Budget not in the collected reports
  • Public money not in the collected reports
  • Media business 2 sources
  • Big capital not in the collected reports
  • Readers and grants not in the collected reports
  • Undisclosed 2 sources

No newsrooms from these groups in the collected reports: budget, public money, big capital, readers and grants.

What are media groups?

Share of reports by media group
GroupShareCount
Media business
  • Newsroom 2
50%2 items
Undisclosed
  • Newsroom 2
50%2 items

How we count media groups — Methodology

Who the outlets write for
  • community 1
  • region 0
  • country 3
  • world 0
Channels
  • Websites 3
  • Telegram 1

How we measure speed, distance and channels

Report an error

  • dev.uaMedia business
    • first item
    • earliest
    • national desk

    Хакери зламують українські сайти для поширення нового шкідливого ПЗ Psychedelic через фейкову перевірку Cloudflare

  • NVMedia business
    • first item
    • in the wave, 1 h later
    • national desk

    Рубльовка TDS. Українські сайти зазнали масштабної кібератаки

    • first item
    • caught up, 3 h later

    Хакери зламують сайти для поширення нового шкідливого ПЗ Psychedelic через фейкову перевірку Cloudflarе.

  • InternetUAUndisclosed
    • first item
    • caught up, 6 h later
    • national desk

    Фейкова перевірка Cloudflare: як хакери з рф атакують український бізнес

Comments

Loading comments…

Allow visit statistics? PostHog keeps them (EU servers) under a random browser id — no name, no account; kept for 12 months. Vercel Speed Insights measures page speed, with no id. The site works the same without. Details