The Russian APT28 group has launched a spear-phishing campaign that has affected a regional prosecutor’s office, an undisclosed executive authority, a military aviation company, and other government entities in Ukraine. It is suggested that users update the vulnerable Roundcube webmail servers to its latest version.