Update May.md

Threat Reports/May.md

@@ -6,3 +6,12 @@
 | 2 MAY | SSSCIP Ukraine | The official website of Lviv Regional Administration was hit by a concentrated DDoS attack, even though the Russian army is focused on capturing the East. The attack on the Lviv RA website lasted over 12 hours | [cip.gov.ua](https://cip.gov.ua/en/news/rosiiski-khakeri-atakuyut-informaciini-sistemi-po-vsii-krayini-adzhe-meta-rosiyi-zavoyuvati-vsyu-ukrayinu-a-ne-tilki-yiyi-skhid) |
 | 3 MAY | Google TAG | APT28 (FancyBear), Turla, COLDRIVER (Callisto), Ghostwriter (UNC1151), Curious Gorge (China PLA SSF) | [blog.google](https://blog.google/threat-analysis-group/update-on-cyber-activity-in-eastern-europe/) |
 | 3 MAY | Washington Post | CIA instructs Russians on how to share secrets with the spy agency | [washingtonpost.com](https://www.washingtonpost.com/national-security/2022/05/03/cia-russia-agents-recruitment-ukraine/) |
+| 6 MAY | CERT-UA | APT28 cyberattack using CredoMap_v2 malware | [cert.gov.ua](https://cert.gov.ua/article/40102) |
+| 7 MAY | CERT-UA | Mass distribution of JesterStealer malware using chemical attack themes | [cert.gov.ua](https://cert.gov.ua/article/40125) |
+| 7 MAY | SSSCIP | While Odessa is being assaulted by Russian tropps, messages in Russian online resources appeared and ordered attacks on the Odesa City Council website | [twitter.com/dsszzi](https://twitter.com/dsszzi/status/1522995490727632896) |
+| 8 MAY | IronNet | Tracking Cobalt Strike Servers Used in Cyberattacks on Ukraine | [ironnet.com](https://www.ironnet.com/blog/tracking-cobalt-strike-servers-used-in-cyberattacks-on-ukraine) |
+| 10 MAY | @h2jazi | Maldoc with CVE-2021-40444 exploit called "The increasingly complicated Russia-Ukraine crisis explained.docx" | [twitter.com/h2jazi](https://twitter.com/h2jazi/status/1524012184010997760) |
+| 10 MAY | US State Department | Attribution of Russia’s Malicious Cyber Activity Against Ukraine | [state.gov](https://www.state.gov/attribution-of-russias-malicious-cyber-activity-against-ukraine/) |
+| 10 MAY | European Union | Russian cyber operations against Ukraine: Declaration by the High Representative on behalf of the European Union | [consilium.europa.eu](https://www.consilium.europa.eu/en/press/press-releases/2022/05/10/russian-cyber-operations-against-ukraine-declaration-by-the-high-representative-on-behalf-of-the-european-union/) |
+| 11 MAY | @BitsOfBinary | Quasar RAT sample called "US and Allies provide chemical weapons to Ukraine's military.pdf.exe" | [twitter.com/bitsofbinary](https://twitter.com/bitsofbinary/status/1524303374430130176) |
+| 11 MAY | ZDnet | Posting a link to a story about the Viasat attack, Elon Musk noted on Twitter: "Starlink has resisted Russian cyberwar jamming & hacking attempts so far, but they're ramping up their efforts." | [zdnet.com](https://www.zdnet.com/article/elon-musk-says-russian-efforts-to-jam-starlink-are-ramping-up/) |