UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML
Russia-aligned UAC-0099 deployed the ASHVEIN RAT against Ukrainian government staff, hiding tasking in HTML.
78
Malware
BURNYBEAR
- Mentions · 7d0
- Mentions · 30d2
- All mentions3
- First seenAug 31, 2026
- Last mentioned22d ago
Timeline
3 articles · newest firstEarth Sirrush Uses PNG Steganography and Malicious Notepad++ Plugins to Deploy Espionage Malware
Russia-aligned Earth Sirrush hides espionage malware in PNGs and Notepad++ plugins against Ukrainian government and defense targets.
74
Russian hackers plant nuclear weapon prompt in malware to trip AI safety guardrails
ESET reports Russian group UAC-0099 hid a prompt in VBS malware comments to trip AI safety filters and disrupt automated malware analysis in Ukraine.
58
Related CVEs
by mentions- CVE-2023-38831100%7.8Code Execution in RARLAB WinRAR via Crafted ZIP File/Folder Name Confusion
Appears with
- LUNCHPOKEmalware · 3
- UAC-0099threat actor · 3
- CERT-UAorganization · 3
- ESETorganization · 2
- Earth Sirrushthreat actor · 2
- TrendAIorganization · 2
- MATCHBOILmalware · 2
- BadPawmalware · 2
- Sandwormthreat actor · 2
- ASHVEINmalware · 2
- Notepad++product · 2
- WinRARproduct · 1
- RARLABvendor · 1
- MeowMeowmalware · 1
- Chromeproduct · 1
- DRAGSTAREmalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.