UAC-0099

Reports per quarter

CVEs named in reports

• CVE-2023-34362 KEV ransomware
• CVE-2023-38831 KEV ransomware
• CVE-2024-1708 KEV ransomware
• CVE-2024-1709 KEV ransomware

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 6 April 2026

   Threat Actor 'UAC-0099' Continues to Target Ukraine

   date ORKL added it fromORKL

   Archived copy on ORKL Detailsfor Threat Actor 'UAC-0099' Continues to Target Ukraine

2. 31 July 2025

   TLP-CLEAR-31072025-ShadowSyndicate-infrastructure-illumination-EN.pdf

   Malpedia library date Julien DUGAY fromORKL

   Archived copy on ORKL Detailsfor TLP-CLEAR-31072025-ShadowSyndicate-infrastructure-illumination-EN.pdf

3. 21 December 2023

   Threat Actor 'UAC-0099' Continues to Target Ukraine

   date in the CCS '25 data Deepinstinct fromORKLCCS '25 data

   The link to Mirror on Box failed its last check. Mirror on Box Detailsfor Threat Actor 'UAC-0099' Continues to Target Ukraine

Newest first. Details opens the report in Explore.