Cyber Serp

UAC-0255 is a threat actor that conducted a phishing campaign impersonating CERT-UA to distribute the AGEWHEEZE RAT, targeting organizations in Ukraine's public and private sectors. The campaign is part of a broader trend of using trusted identities to enhance victim engagement, as seen in previous activities like UAC-0190 and UAC-0252. CERT-UA identified UAC-0255 after discovering links to the CyberSerp Telegram channel, which claimed responsibility for the attack. The activity is documented under the identifier CERT-UA#21075, with detection rules available for cybersecurity analysts.

Qrupun mənşəyi Rusiya kimi bildirilir.

Qrup 1 zərərli proqram ailəsi ilə əlaqələndirilib.

Digər adları: UAC-0255

Qrup 1 zərərli proqram ailəsi ilə əlaqələndirilib.

Bu aktor haqqında dərc edilmiş hesabatlar:

• https://socprime.com/blog/uac-0255-distributing-agewheeze-rat/
• https://cert.gov.ua/article/6288047

Mənbə: MISP Galaxy, Malpedia.