gov.ua
State sites of Ukraine
-
People with visual impairment Standard versionA-A+
Українською
- Personal account
News
UAC-0200: Espionage against the defense-industrial complex using DarkCrystal RAT (CERT-UA#14045)
The government computer emergency response team CERT-UA has recorded numerous cases of targeted cyberattacks against both employees of defense-industrial complex enterprises and individual representatives of the Defense Forces of Ukraine.During March 2025, the Signal messenger detected the distribution of messages with archives that allegedly contain a report with the results of a meeting. At the same time, in some cases, to increase trust, messages can be sent from persons from the list of existing contacts whose accounts have been compromised in advance.
Cyber Challenges Demand Not Only Technological Solutions, But Also the Best Talent – Oleksandr Potii
Today, digital security is a matter of national resilience, and everyone shares responsibility for cybersecurity – government agencies, the private sector, expert communities, and civil society alike. Women are playing an increasingly important role in this, especially in the context of war, as they find their place in professions traditionally considered "male."
Employees of the State Research and Development Institute of Cyber Security Technologies took part in a training session for facilitators of tabletop exercises (English TTX - Tabletop Exercise)
The training was organized by the Cybersecurity and Infrastructure Security Agency of the Department of National Security of the United States of America (CISA) with the support of the USAID Project "Cybersecurity of Critical Infrastructure of Ukraine".
Employees of the State Research Institute of Cyber Security Technologies took part in the online course "Oracle Database: SQL and PL/SQL Fundamentals"
The curriculum consisted of 2 modules and practice:- Module 1 - SQL 1 Fundamentals;- Module 2 - PL/SQL Fundamentals.The training concept was to present the basic principles of operation of industrial control systems, possible vulnerabilities and methods of protection.
Representatives of the State Research Institute of Cyber Security Technologies took part in the SAINT CYBER-Cyber analyst training 2023 training course
The training program consisted of two modules:- Module I – general training;- Module II – specialized training.The concept of the training was to present the training group in the form of a SOC (Security Operations Center) and, using theoretical and practical training elements, familiarize the training group with SOC activities.
COMPUTER SECURITY AND INCIDENT RESPONSE TEAM
CSIRT - is a computer emergency response team of the State Research Institute of Cyber Protection Technologies, which functions as part of the State Service for Special Communications and Information Protection of Ukraine. The main functional direction of the CSIRT is to counter cyber threats in automated systems and information and communication systems of the State Research and Development Institute of Cyber Security Technologies and energy industry enterprises. The territorial zone of responsibility consists of the western regions of Ukraine, namely: Khmelnytskyi, Rivne, Volyn, Ternopil, Chernivtsi, Ivano-Frankivsk, Lviv and Zakarpattia regions.
Tasks of the CSIRT:
accumulation and analysis of data on cyber incidents, maintenance of the state registry of cyber incidents;
providing owners of cyber protection facilities with practical assistance in preventing, identifying and eliminating the consequences of cyber incidents in relation to these facilities;
organization and holding of practical seminars on cyber protection issues for subjects of the national cyber security system and owners of cyber protection objects;
preparation and placement on its official website of recommendations on countering modern types of cyber-attacks and cyber-threats;
interaction with law enforcement agencies, providing them with timely information about cyber attacks;
interaction with foreign and international organizations on cyber incident response issues, in particular within the framework of participation in the FIRST Security Incident Response Teams Forum with payment of annual membership fees;
interaction with Ukrainian computer emergency response teams, as well as other enterprises, institutions and organizations, regardless of the form of ownership, that conduct activities related to ensuring the security of cyberspace;
processing information received from citizens about cyber incidents regarding cyber protection objects;
assistance to state bodies, local self-government bodies, military formations formed in accordance with the law, enterprises, institutions and organizations regardless of the form of ownership, as well as citizens of Ukraine in solving issues of cyber protection and countering cyber threats.
