Security1 hOctober 8, 2026, 22:26

UAC-0099 Targets Ukrainian Government Staff With ASHVEIN RAT

Russia-aligned actor UAC-0099 has been linked to a new .NET infostealer and RAT dubbed ASHVEIN, used against Ukrainian government personnel. TrendAI tracks the cluster as Earth Sirrush (formerly SHADOW-EARTH-065), with commands hidden in HTML.

The Hacker News

Open source

UAC-0099 Targets Ukrainian Government Staff With ASHVEIN RAT

UAC-0099 targets Ukrainian government personnel
New .NET infostealer and RAT named ASHVEIN
TrendAI tracks the cluster as Earth Sirrush
Malware hides commands in HTML

#UAC-0099#ASHVEIN#TrendAI

ESET details MATCHBOIL: UAC-0099 malware installs spying backdoor on Windows

Policy

UK government tells staff not to thank AI: 'You don't need to say thank you'

Security

Ukrainian Sea Drones Set Tanker Ablaze Off Sochi

Security

UAC-0099 Targets Ukrainian Government Staff With ASHVEIN RAT

ESET details MATCHBOIL: UAC-0099 malware installs spying backdoor on Windows

UK government tells staff not to thank AI: 'You don't need to say thank you'

Ukrainian Sea Drones Set Tanker Ablaze Off Sochi

TrendAI launches autonomous AI-driven vulnerability discovery service