All actors

UAC-0050

Reports
133
Last reported
Known CVEs
30
ID
uac-0050
Sources
MISPMalpedia
Merge evidence
1 alias match

Reports per quarter

  1. 2017 Q1: 1 report
  2. 2017 Q2: no reports
  3. 2017 Q3: no reports
  4. 2017 Q4: 1 report
  5. 2018 Q1: 1 report
  6. 2018 Q2: no reports
  7. 2018 Q3: 2 reports
  8. 2018 Q4: no reports
  9. 2019 Q1: 2 reports
  10. 2019 Q2: 2 reports
  11. 2019 Q3: 4 reports
  12. 2019 Q4: 1 report
  13. 2020 Q1: 2 reports
  14. 2020 Q2: 4 reports
  15. 2020 Q3: 2 reports
  16. 2020 Q4: 2 reports
  17. 2021 Q1: 5 reports
  18. 2021 Q2: 2 reports
  19. 2021 Q3: 6 reports
  20. 2021 Q4: 7 reports
  21. 2022 Q1: 13 reports
  22. 2022 Q2: 3 reports
  23. 2022 Q3: 4 reports
  24. 2022 Q4: 2 reports
  25. 2023 Q1: 6 reports
  26. 2023 Q2: 4 reports
  27. 2023 Q3: 3 reports
  28. 2023 Q4: 7 reports
  29. 2024 Q1: 9 reports
  30. 2024 Q2: 7 reports
  31. 2024 Q3: 2 reports
  32. 2024 Q4: 2 reports
  33. 2025 Q1: 7 reports
  34. 2025 Q2: 3 reports
  35. 2025 Q3: 2 reports
  36. 2025 Q4: 4 reports
  37. 2026 Q1: 3 reports
  38. 2026 Q2: 7 reports
  39. 2026 Q3: 1 report
Dated reports, 2017 Q1 to 2026 Q3.

Techniques seen in the last two years

Show all 71 techniques Show fewer

Counts come from technique IDs in the actor's report text.

CVEs named in reports

Show all 30 CVEs Show fewer

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. Remcos (Malware Family)

    date ORKL added it fromORKL

Show all 133 reports Show fewer
  1. Untitled

    Malpedia library date fromORKL

  2. CERT-UA

    Malpedia library date fromORKL

  3. New UAC-0050 attack using RemcosRAT

    date in the CCS '25 data CERT-UA fromORKLCCS '25 data

  4. CERT-UA

    Malpedia library date fromORKL

  5. CERT-UA

    Malpedia library date fromORKL

  6. CERT-UA

    Malpedia library date fromORKL

  7. report-old-dogs-new-tricks.pdf

    Malpedia library date fromORKL

  8. Analytics

    Malpedia library date fromORKL

  9. 2020-q2-spamhaus-botnet-threat-report.pdf

    Malpedia library date fromORKL

Newest first. Details opens the report in Explore.