A threat actor offering a supposed distributed denial-of-service (DDoS) tool on Telegram, thats purportedly meant to pummel Russian websites. In truth, the file is actually the Phoenix infostealer, a keylogger with powerful anti-detection and anti-analysis modules. The threat advisory referenced a tweet exhorting people to join an IT army to fight on the cyber-frontlines. Cyber-warzone has been undergoing seismic shifts since Russia’s invasion of Ukraine, Cisco said.”]
Source: https://threatpost.com/malware-posing-russia-ddos-tool-bites-pro-ukraine-hackers/178864/