Detailed technical papers describe a multi-stage infection process designed to evade detection:
: The campaign primarily targeted European diplomatic entities and government organizations, often those involved in refugee assistance or border security. Ukraine.zip
: Opening the archive (e.g., Situation at the EU borders with Ukraine.zip ) reveals a dropper executable. Ukraine.zip