Operation BugDrop: CyberX Discovers Large-Scale Cyber-Reconnaissance Operation Targeting Ukrainian Organizations

Operation BugDrop is a large-scale, targeted cyber-reconnaissance campaign discovered by CyberX that primarily targeted Ukrainian critical infrastructure, media, and research organizations. The attackers used spear-phishing with malicious Office macros to deploy a multi-stage reflective-DLL malware loader, delivered modular data-stealing plugins (microphone recorder, keylogger, file and browser collectors), used Dropbox for encrypted exfiltration, and employed multiple anti-analysis and persistence techniques; the report includes compilation dates, geographic targeting, technical architecture, and SHA-256 hashes for identified components.