According to the State Intelligence Service, the public authorities of Ukraine received new dangerous letters with the subject "Specialized prosecutor's office in the military and defense sphere. Information about the availability of vacancies and their staffing". According to the department, the letters have an attachment in the form of an XLS document containing a macro, the activation of which will lead to the creation and launch of the "write.exe" file on the computer. It may cause the device to be damaged by Cobalt Strike Beacon. The State Intelligence Service associates the activity with the work of the UAC-0056 group, which was already involved in cyberattacks in Ukraine in April and March.