As cited
Copy frozen at (site build).
threat intel
UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML
UAC-0099, a Russia-aligned threat actor, deployed a previously undocumented .NET remote access trojan (RAT) called ASHVEIN in attacks targeting Ukrainian government personnel. The malware, tracked by TrendAI under the cluster name Earth Sirrush, functions as both an infostealer and RAT.
Why it matters: Ukrainian government entities face targeting by a nation-state adversary using a newly discovered RAT; security teams should monitor for ASHVEIN indicators of compromise (IOCs) and implement enhanced detection for .NET-based malware in their networks.
- Source published
- First seen by Cybersecurity Tracker