Proofpoint Threat Insight
TA406 phishing and malware against Ukrainian government entities (February 2025) · May 13, 2025
In February 2025, TA406 began targeting government entities in Ukraine, delivering both credential harvesting and malware in its phishing campaigns.