Cybersecurity Alert for Uzbekistan’s Tech, Startup, and Business Community

A recent report on TheHackerNews.com highlights a new targeted cyberattack campaign expanding into Uzbekistan. A threat group known as Bloody Wolf is conducting phishing operations focused on organizations across the region.

Key details:

- Attackers send emails impersonating official government institutions.  

- Attached “PDF” files contain a hidden Java (JAR) malware loader.  

- Executing these files installs NetSupport RAT, enabling full remote control of the victim’s device.

The campaign uses geofencing techniques:

- Users outside Uzbekistan are redirected to a legitimate page.  

- Users inside Uzbekistan receive the malicious payload.

High-risk sectors include:

- technology and IT companies  

- government and public institutions  

- financial and banking organizations  

- education sector and large enterprises

Recommended precautions:

- Treat unexpected emails from “government” sources with caution.  

- Avoid opening attachments that request installation of Java.  

- Do not run unfamiliar JAR files.  

- Verify document authenticity through official channels before opening.

"As the regional digital ecosystem expands, maintaining strong cybersecurity awareness is essential. This alert is shared to ensure organizations and individuals remain informed and protected."

Sources:
https://thehackernews.com/2025/11/bloody-wolf-expands-java-based.html