ANALYSIS OF USING SOCIAL ENGINEERING IN HOSTILE CYBER ATTACKS ON UKRAINE'S SECURITY AND DEFENSE SECTOR

This article investigates the growing role of social engineering as a key method used in cyberattacks targeting the Armed Forces of Ukraine, the Ministry of Defense, and enterprises within the defense-industrial complex. Special attention is paid to analyzing the mechanisms by which attackers deliver malicious content, the thematic composition of their messages, and the psychological as well as technical tactics they employ to manipulate targets. The research methodology is based on empirical data from incident reports by CERT-UA and corroborated by open-source international intelligence. The study reveals that attackers frequently exploit popular communication channels such as messengers (Signal, Telegram), e-mail, and SMS, using tailored messages that reflect current military, administrative, or technical narratives relevant to the target audience. The impersonation of official institutions, distribution of booby-trapped files through known vulnerabilities (e.g., WinRAR CVE-2023-38831), and abuse of legitimate remote-access tools such as AnyDesk, SyncThing, or PowerShell are identified as prominent techniques. Attacks often involve layered delivery mechanisms combining social trust, urgency, and digital deception to bypass traditional cybersecurity measures. The analysis underscores that the majority of successful compromises result not from technological flaws but from human factors – such as trust in authority, hurry and lack of awareness. As a result, the article advocates for the development and deployment of adaptive personnel training systems, scenario-based awareness programs, and early warning mechanisms. It also emphasizes the need for cross-sectoral cooperation in establishing dynamic cyber hygiene strategies and behavioral models for early threat detection. The results can be used in the design of specialized software for information (or information and communication) systems and automation tools for command posts to counter adversary cyber threats, as well as in the development of cybersecurity awareness programs for military personnel and civil servants.