Ukrainian State Agencies Targeted with Open-Source Malware MerlinAgent

In early August, an unidentified threat actor tracked as UAC-0154 sent malicious emails to its targets, purportedly containing security tips from Ukraine’s computer emergency response team (CERT-UA).