Fake PDF Files Hide Konni Malware Campaign Targeting Ukraine Organizations

A newly documented campaign targeting people and organizations focused on Ukraine uses document-themed Windows shortcuts to install a malware downloader called VelvetCake. The goal appears to be gathering political and military intelligence about the war. The attackers likely send targeted emails with ZIP attachments. Inside are shortcut files that look like PDFs about peace proposals, food prices and researcher resumes. Opening one runs code while displaying a decoy. Another route uses a modified video meeting installer. SOCRadar said in a report shared with Cyber Security News (CSN) that its analysts identified the…