System of Electronic Interaction of Executive Bodies

The System of Electronic Interaction of Executive Bodies, also known as SEI EB, is a Ukrainian government organisation.
Its headquarters is located in Ukraine.
SEI EB operates as a government document management system.
It provides a shared electronic interaction platform for the country’s executive bodies.
The platform enables state agencies to exchange and manage official documents electronically.

On 24 February 2021, Russian-backed hackers compromised SEI EB’s document management system.
The compromise was part of a cyberespionage campaign.
Attackers delivered malicious documents containing macros through the platform.
When opened, these macros installed malware that granted remote control of the infected systems.
The operation was classified as a supply chain attack that exploited the trusted nature of the service.

The same threat actors were linked to simultaneous Distributed Denial of Service (DDoS) attacks against Ukrainian government websites.
Those DDoS attacks were reportedly carried out in retaliation for law enforcement actions against a ransomware group.
By targeting SEI EB, the attackers gained access to multiple state agencies that rely on the shared platform.
The incident highlighted how a trusted government service can be leveraged for widespread espionage.
Consequently, the event underscored the importance of securing shared electronic interaction infrastructures within national governments.