🔍 UAC-0099 deploys ASHVEIN RAT against Ukrainian government staff

UAC-0099 is targeting Ukrainian government personnel with the ASHVEIN RAT, using HTML content to conceal command data. The activity is framed as a cyber-espionage campaign focused on government users rather than broad criminal distribution.

Embedding instructions inside HTML adds a simple but effective layer of obfuscation, complicating static inspection and delaying detection in routine email or web-based workflows. The targeting pattern points to credential, access, or document collection priorities inside state administrative networks.

🛰️ Open sources - closed narratives
@sitreports