Russian threat actors targeted vulnerable web servers of multiple Ukrainian security and defense organizations with a virus that added them to a botnet used to carry out distributed denial of service attacks.