UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML
Russia-aligned UAC-0099 deployed the ASHVEIN RAT against Ukrainian government staff, hiding tasking in HTML.
78
Malware
DRAGSTARE
- Mentions · 7d0
- Mentions · 30d3
- All mentions4
- First seenSep 11, 2026
- Last mentioned24d ago
Timeline
4 articles · newest firstRussian-aligned spies upgrade malware used in attacks on Ukrainian transport, energy firms
UAC-0099 upgraded MatchBoil malware in espionage attacks on Ukrainian transport and energy firms.
74
Earth Sirrush Espionage Activity May Support Sandworm Operations Against Ukraine
Earth Sirrush has spear-phished Ukrainian government and logistics since 2022, possibly feeding Sandworm.
78
Hackers Weaponize AI Safety Guardrails to Hide Malware From LLM-Powered Security Scanners
ESET says Russia-aligned actor UAC-0099 hid guardrail-triggering comments in VBScript to derail LLM-based malware scanners in Ukraine.
58
Related CVEs
by mentions- CVE-2023-38831100%7.8Code Execution in RARLAB WinRAR via Crafted ZIP File/Folder Name Confusion
Appears with
- ESETorganization · 4
- CERT-UAorganization · 4
- MatchBoilmalware · 4
- UAC-0099threat actor · 4
- MatchWokmalware · 3
- Sandwormthreat actor · 2
- Notepad++product · 2
- LONEPAGEmalware · 2
- MeowMeowmalware · 2
- TrendAIorganization · 2
- Earth Sirrushthreat actor · 2
- ASHVEINmalware · 2
- Ukrainian governmentvictim · 2
- Ukrainian defense organizationsvictim · 1
- WinRARproduct · 1
- OVERJAMmalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.