UAT-10820

Mentions · 7d0
Mentions · 30d0
All mentions5
First seenSep 8, 2026
Last mentionedSep 30, 2026

Timeline

5 articles · newest first

Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures

Huntress details attackers abusing ChatGPT Custom GPTs with ClickFix lures to deliver a full-featured RAT via DLL sideloading, infecting at least 40 users.

The Hacker NewsSep 30, 15:00 UTC · Sep 30, 2026MalwareExploited1 · 1 read

We've got one word for it, and it's usually the wrong one

Cisco Talos's Threat Source newsletter critiques 'burnout' terminology, describing four occupational injuries, and flags a UAT-10820 WebDAV stealer campaign at a Ukrainian government organization.

Cisco TalosSep 10, 18:00 UTC · Sep 10, 2026IndustryExploited2 · 1 read

ClearFake Deploys Crypto Stealer That Uses Vulnerable Driver to Kill EDR Security Tools

Cisco Talos details ClearFake's fake-CAPTCHA chain deploying ZigCryptoStealer with a BYOVD attack that kills EDR processes, observed at a Ukrainian government organization in April 2026.

Cyber Security NewsSep 9, 14:26 UTC · Sep 9, 2026MalwareExploited3

Hackers Abuse Google CAPTCHA, WebDAV and BNB Smart Chain to Deploy Credential-Stealing Malware

Cisco Talos details ClickFix campaigns abusing fake Google CAPTCHA prompts, WebDAV and BNB Smart Chain to deploy the Amatera infostealer.

GBHackersSep 9, 13:27 UTC · Sep 9, 2026MalwareExploited1 · 1 read

ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager

Cisco Talos details ClearFake WebDAV chains delivering Amatera stealer to a Ukrainian government organization, with cryptocurrency and credential theft payloads.

Cisco TalosSep 8, 10:01 UTC · Sep 8, 2026MalwareExploited6 · 2 reads

Appears with

ZigCryptoStealermalware · 4
Ukrainian government organizationvictim · 4
Cisco Talosvendor · 4
Amateramalware · 3
NetSupport Managerproduct · 3
ClearFakemalware · 2
Cisco Talosorganization · 2
ZigCryptoStealerproduct · 2
Cloudflare Workersproduct · 2
Amateraproduct · 2
Microsoft Defenderproduct · 1
BNB Smart Chainorganization · 1
ChatGPTorganization · 1
NetSupportvendor · 1
Microsoftvendor · 1
ServiceNowvendor · 1

Entities are extracted by the model from each article. First seen Sep 8, 2026, last mentioned Sep 30, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.