Ukraine

Reporting on the cybersecurity landscape within the Ukraine conflict zone. This category tracks the activity of specialized threat clusters (UACs), nation-state espionage campaigns, and the deployment of experimental malware against critical infrastructure, healthcare, and government entities.

A medical cross and government building with data being exfiltrated, representing the UAC-0247 attack.

Nation-State Cyber Threats

UAC-0247 Weaponizes Malicious Lures to Harvest Browser and WhatsApp Data from Critical Sectors

A newly identified campaign by the threat actor UAC-0247 is targeting healthcare facilities and government agencies, utilizing "urgent" document lures to deploy info-stealing malware. KYIV, UKRAINE — A persistent cyber-espionage campaign attributed to the threat group UAC-0247 has significantly expanded its operations, targeting Ukrainian hospitals, medical clinics, and government