Russian Hackers are spreading the Kelihos Trojan leading victims into believing it is a software to hit Western Governments. The hackers are riding the interest on the conflict in Ukraine to serve malware via links found in spam emails purporting to support the Russian cause. Over 40 percent of the infected machine was located in Ukraine, according to security experts at Bitdefender. The malware is distributed on a global scale and used to serve further malware, more than 500 infected IPs were detected in the US.”]
Source: https://securityaffairs.co/wordpress/27827/cyber-crime/russian-hackers-disguise-kelihos.html