Hackers have been leveraging SmokeLoader malware in phishing campaigns to target Ukrainian government and administration organizations.