UAC-0149

Reports per quarter

CVEs named in reports

• CVE-2023-38831 KEV ransomware

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 6 April 2026

   Evolving Tactics: How Russian APT Groups Are Shaping Cyber Threats in 2024

   date ORKL added it fromORKL

   Archived copy on ORKL Detailsfor Evolving Tactics: How Russian APT Groups Are Shaping Cyber Threats in 2024

2. 11 December 2024

   Frequent freeloader part II: Russian actor Secret Blizzard using tools of other groups to attack Ukraine | Microsoft Security Blog

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Frequent freeloader part II: Russian actor Secret Blizzard using tools of other groups to attack Ukraine | Microsoft Security Blog

3. 30 May 2024

   Disrupting FlyingYeti's campaign targeting Ukraine

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Disrupting FlyingYeti's campaign targeting Ukraine

4. 30 May 2024

   Disrupting FlyingYeti's campaign targeting Ukraine

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Disrupting FlyingYeti's campaign targeting Ukraine

5. 18 April 2024

   CERT-UA

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor CERT-UA

6. 26 February 2024

   UAC-0149 Attack Detection: Hackers Launch a Targeted Attack Against the Armed Forces of Ukraine, as CERT-UA Reports

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor UAC-0149 Attack Detection: Hackers Launch a Targeted Attack Against the Armed Forces of Ukraine, as CERT-UA Reports

7. 24 February 2024

   CERT-UA

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor CERT-UA

Newest first. Details opens the report in Explore.