In Telegram, dangerous messages are being spread, allegedly sent by "Reserve+"

In Telegram, dangerous messages are being spread, allegedly sent by "Reserve+"

The government response team CERT-UA received information about the distribution of dangerous messages on Telegram allegedly from the technical support of the service "Reserve+".

This was reported by the press service of the State Special Communications Service.

Specifically, users receive messages through the @reserveplusbot account about the need to install special software with an attached archive RESERVPLUS.zip.

At the same time, the archive itself contains malware called MEDUZASTEALER, which steals files.

"The reserveplusbot account is created to mimic a Telegram bot impersonating tech support of the application for conscripts, liable military personnel, and reservists "Reserve+". It should be noted that this account was indeed listed as one of the contacts for technical support of "Reserve+" in May 2024," the message states.

The details of the incident are being clarified. The CERT-UA team has taken measures to minimize the threat, the agency added.