Hackers are creating fake websites for Ukrainian Armed Forces (ZSU) brigades and alarm apps for Android devices to conduct attacks, according to the State Special Communications Service (Derzhspetszviazkou). The report highlights that hackers are actively using smartphones for reconnaissance, and successful attacks can grant them full access to sensitive data.

The 'Cyber Threats: Ukraine' report for the first half of 2026 identified the DarkSword exploit kit, which secretly infects Apple (iOS) devices when users visit compromised Ukrainian news portals and government resources. For Android users, hackers are setting up phishing pages disguised as official military brigade websites or air raid alert applications.