UAC-0099 Deploys ASHVEIN RAT Against Ukrainian Government Targets

Thu, 08 Oct 2026 17:51:36 +0000

Engineer — Skip
SOC/IR — Learn: ASHVEIN is a newly documented .NET infostealer/RAT using HTML to conceal C2 commands — adds to actor-profile knowledge for UAC-0099, but no IOCs or ATT&CK mappings are published in this report to enable immediate detection or hunting work.
Leader — Skip

Ukraine-Apt on CuraSec