"Дія — Державні послуги онлайн": https://friendly-trifle-f3e6f0.netlify[.]app/ Some translation:...

Summary

A phishing page impersonating Ukraine's 'Diia' government services portal has been identified, urging users to install a 'critical security update'. The page references a non-existent resolution from the Cabinet of Ministers of Ukraine dated June 4, 2026, to legitimize the fake update. This tactic aims to trick users into downloading malicious software disguised as a security certificate.

Indicators of Compromise

• url — https://friendly-trifle-f3e6f0.netlify[.]app/

Entities