CERT-UA reported mass distribution of phishing emails supposedly originating from Ukrainian state bodies and targeting Ukrainian entities.  The lure is a Ukrainian language translation software, leading to the infection of GrimPlant and GraphSteel.