highCyber Attacks
UAC-0099 Deploys ASHVEIN RAT Against Ukrainian Government via HTML Smuggling
The Russia-aligned threat actor UAC-0099, also tracked as Earth Sirrush, has been attributed to attacks targeting Ukrainian government personnel. The campaign delivers ASHVEIN, a previously undocumented .NET-based infostealer and remote access trojan (RAT), using HTML smuggling techniques. Commands are concealed within HTML files to evade detection and establish persistent remote access to compromised systems.
The Hacker News1 min read